| Max CVSS | 7.8 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-5103 | 4.3 |
Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine EventLog Analyzer 9 build 9000 allows remote attackers to inject arbitrary web script or HTML via the j_username parameter to event/j_security_check. Fixed in Version 10 Build 10000.
|
26-03-2020 - 14:15 | 25-07-2014 - 19:55 | |
| CVE-2017-8477 | 1.9 |
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted applica
|
18-03-2019 - 19:53 | 15-06-2017 - 01:29 | |
| CVE-2008-6524 | 6.5 |
resetpass.php in openInvoice 0.90 beta and earlier allows remote authenticated users to change the passwords of arbitrary users via a modified uid parameter. NOTE: this can be leveraged with a separate vulnerability in auth.php to modify passwords w
|
29-09-2017 - 01:33 | 25-03-2009 - 18:30 | |
| CVE-2008-6523 | 7.5 |
auth.php in openInvoice 0.90 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the oiauth cookie. NOTE: this can be leveraged with a separate vulnerability in resetpass.php to modify passwords for arbit
|
29-09-2017 - 01:33 | 25-03-2009 - 18:30 | |
| CVE-2013-1923 | 3.2 |
rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofing attacks.
|
29-08-2017 - 01:33 | 21-01-2014 - 18:55 | |
| CVE-2003-1514 | 7.8 |
eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2006-3336 | 4.0 |
TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and other allowed extensions that are not .txt. NOTE: this is only a vulne
|
08-03-2011 - 02:38 | 05-07-2006 - 20:05 |