| Max CVSS | 7.8 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-5454 | 4.3 |
Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item.
|
26-02-2019 - 13:21 | 08-07-2015 - 15:59 | |
| CVE-2006-1941 | 5.0 |
Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a crafted Clock Synchronisation packet that triggers an access violation.
|
18-10-2018 - 16:37 | 20-04-2006 - 22:02 | |
| CVE-2008-0675 | 7.5 |
SQL injection vulnerability in cms/index.pl in The Everything Development Engine in The Everything Development System Pre-1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the node_id parameter.
|
15-10-2018 - 22:02 | 12-02-2008 - 01:00 | |
| CVE-2015-5145 | 7.8 |
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
|
22-09-2017 - 01:29 | 14-07-2015 - 17:59 | |
| CVE-2003-1465 | 5.0 |
Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2015-5459 | 6.5 |
SQL injection vulnerability in the AdvanceSearch.class in AdventNetPassTrix.jar in ManageEngine Password Manager Pro (PMP) before 8.1 Build 8101 allows remote authenticated users to execute arbitrary SQL commands via the ANDOR parameter, as demonstra
|
07-12-2016 - 18:16 | 08-07-2015 - 15:59 | |
| CVE-2015-7226 | 5.0 |
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to t
|
28-11-2016 - 19:42 | 17-09-2015 - 16:59 | |
| CVE-2014-3266 | 4.3 |
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189.
|
16-09-2015 - 19:28 | 26-05-2014 - 00:25 | |
| CVE-2013-0234 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the params[twitter_username] parameter to action/widgets/save.
|
21-02-2014 - 18:08 | 02-02-2014 - 20:55 |