| Max CVSS | 9.3 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-9402 | 7.8 |
The nss_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configuration is enabled, allows remote attackers to cause a denial of service (infinite loop) by sending a positive
|
13-02-2023 - 00:45 | 24-02-2015 - 15:59 | |
| CVE-2014-5353 | 3.5 |
The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via
|
02-02-2021 - 18:57 | 16-12-2014 - 23:59 | |
| CVE-2005-3365 | 7.5 |
Multiple SQL injection vulnerabilities in DCP-Portal 6 and earlier allow remote attackers to execute arbitrary SQL commands, possibly requiring encoded characters, via (1) the name parameter in register.php, (2) the email parameter in lostpassword.ph
|
19-10-2018 - 15:36 | 30-10-2005 - 14:34 | |
| CVE-2003-1541 | 5.0 |
PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin script password, and other passwords, via a direct request to files/passwd.txt.
|
19-10-2018 - 15:29 | 31-12-2003 - 05:00 | |
| CVE-2014-9408 | 5.0 |
Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 uses part of the MAC address as part of the RC4 setup key, which makes it easier for remote attackers to guess the key via a
|
09-10-2018 - 19:55 | 19-12-2014 - 15:59 | |
| CVE-2014-9522 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in CMS Papoo Light 6.0.0 (Rev 4701) allow remote attackers to inject arbitrary web script or HTML via the (1) author field to guestbook.php or (2) username field to account.php.
|
09-10-2018 - 19:55 | 05-01-2015 - 20:59 | |
| CVE-2014-2716 | 4.3 |
Ekahau B4 staff badge tag 5.7 with firmware 1.4.52, Real-Time Location System (RTLS) Controller 6.0.5-FINAL, and Activator 3 reuses the RC4 cipher stream, which makes it easier for remote attackers to obtain plaintext messages via an XOR operation on
|
09-10-2018 - 19:43 | 19-12-2014 - 15:59 | |
| CVE-2014-2026 | 4.3 |
Cross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the reques
|
09-10-2018 - 19:43 | 19-12-2014 - 15:59 | |
| CVE-2014-9253 | 4.3 |
The default file type whitelist configuration in conf/mime.conf in the Media Manager in DokuWiki before 2014-09-29b allows remote attackers to execute arbitrary web script or HTML by uploading an SWF file, then accessing it via the media parameter to
|
08-09-2017 - 01:29 | 17-12-2014 - 18:59 | |
| CVE-2006-1352 | 5.0 |
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.
|
20-07-2017 - 01:30 | 22-03-2006 - 01:02 | |
| CVE-2017-7271 | 4.3 |
Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception s
|
08-05-2017 - 01:29 | 27-03-2017 - 17:59 | |
| CVE-2011-1548 | 6.3 |
The default configuration of logrotate on Debian GNU/Linux uses root privileges to process files in directories that permit non-root write access, which allows local users to conduct symlink and hard link attacks by leveraging logrotate's lack of sup
|
21-04-2011 - 02:33 | 30-03-2011 - 22:55 | |
| CVE-2009-4778 | 9.3 |
Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion (RIM) BlackBerry Enterprise Server (BES) software 4.1.3 through 4.1.7 and 5.0.0, and BlackBerry Professional Software 4.1.4, allow use
|
22-04-2010 - 04:00 | 21-04-2010 - 14:30 |