| Max CVSS | 7.5 | Min CVSS | 3.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-5199 | 6.5 |
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
|
03-10-2019 - 00:03 | 24-03-2017 - 07:59 | |
| CVE-2006-1277 | 5.8 |
Cross-site scripting (XSS) vulnerability in signup.php in @1 File Store 2006.03.07 allows remote attackers to inject arbitrary web script or HTML via the (1) real_name, (2) email, and (3) login parameters.
|
18-10-2018 - 16:31 | 19-03-2006 - 11:06 | |
| CVE-2006-1278 | 6.8 |
SQL injection vulnerability in @1 File Store 2006.03.07 allows remote attackers to execute arbitrary SQL commands via the id parameter to (1) functions.php and (2) user.php in the libs directory, (3) edit.php and (4) delete.php in control/files/, (5)
|
18-10-2018 - 16:31 | 19-03-2006 - 11:06 | |
| CVE-2008-0092 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in the search module in Appalachian State University phpWebSite 1.4.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
|
15-10-2018 - 21:57 | 04-01-2008 - 01:46 | |
| CVE-2004-0055 | 5.0 |
The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.
|
11-10-2017 - 01:29 | 17-02-2004 - 05:00 | |
| CVE-2014-8670 | 5.8 |
Open redirect vulnerability in go.php in vBulletin 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. <a href = "http://cwe.mitre.org/data/definitions/601.html"> CWE-601
|
08-09-2017 - 01:29 | 06-11-2014 - 15:55 | |
| CVE-2009-4082 | 7.5 |
PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.
|
17-08-2017 - 01:31 | 29-11-2009 - 13:07 | |
| CVE-2014-8737 | 3.6 |
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot)
|
01-07-2017 - 01:29 | 09-12-2014 - 23:59 | |
| CVE-2014-8651 | 7.2 |
The KDE Clock KCM policykit helper in kde-workspace before 4.11.14 and plasma-desktop before 5.1.1 allows local users to gain privileges via a crafted ntpUtility (ntp utility name) argument.
|
07-12-2016 - 03:01 | 06-12-2014 - 21:59 | |
| CVE-2014-0469 | 6.8 |
Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines.
|
31-05-2014 - 04:30 | 05-05-2014 - 16:07 |