| Max CVSS | 7.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6388 | 4.3 |
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or H
|
02-02-2024 - 16:16 | 08-01-2008 - 18:46 | |
| CVE-2015-4826 | 4.0 |
Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Types.
|
08-09-2022 - 20:55 | 21-10-2015 - 21:59 | |
| CVE-2003-1556 | 4.3 |
Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) homepage_title (webpage title) parameters.
|
19-10-2018 - 15:29 | 31-12-2003 - 05:00 | |
| CVE-2017-7310 | 6.8 |
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitr
|
08-03-2018 - 02:29 | 29-03-2017 - 21:59 | |
| CVE-2015-1459 | 4.3 |
Cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote attackers to inject arbitrary web script or HTML via the operation parameter to cert/scep/.
|
08-09-2017 - 01:29 | 03-02-2015 - 16:59 | |
| CVE-2015-1457 | 4.9 |
Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command.
|
08-09-2017 - 01:29 | 03-02-2015 - 16:59 | |
| CVE-2015-1458 | 6.9 |
Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tmp/privexec/dbgcore_enable_shell_access and executing the "shell" command.
|
08-09-2017 - 01:29 | 03-02-2015 - 16:59 | |
| CVE-2015-0596 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj67163.
|
08-09-2017 - 01:29 | 02-02-2015 - 01:59 | |
| CVE-2015-0597 | 5.0 |
The Forgot Password feature in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to enumerate administrative accounts via crafted packets, aka Bug IDs CSCuj67166 and CSCuj67159.
|
08-09-2017 - 01:29 | 02-02-2015 - 01:59 | |
| CVE-2015-0595 | 5.0 |
The XMLAPI in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading return messages from crafted GET requests, aka Bug ID CSCuj67079.
|
08-09-2017 - 01:29 | 02-02-2015 - 01:59 | |
| CVE-2006-1356 | 5.1 |
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.
|
20-07-2017 - 01:30 | 22-03-2006 - 02:02 | |
| CVE-2014-9328 | 7.5 |
ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upack packer file, related to a "heap out of bounds condition."
|
03-01-2017 - 02:59 | 03-02-2015 - 16:59 | |
| CVE-2015-0512 | 5.8 |
Open redirect vulnerability in EMC Unisphere Central before 4.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter. <a href="http://cwe.mitre.org/data/definitions/601.html">CWE-6
|
17-09-2015 - 16:33 | 02-02-2015 - 01:59 | |
| CVE-2015-1455 | 7.5 |
Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www-data PostgreSQL user, which makes it easier for remote attackers to obtain access via unspecified vectors.
|
19-02-2015 - 18:59 | 03-02-2015 - 16:59 | |
| CVE-2015-1456 | 4.0 |
Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/.
|
19-02-2015 - 18:59 | 03-02-2015 - 16:59 |