| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2004-2748 | 4.3 |
viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message.
|
19-10-2018 - 15:30 | 31-12-2004 - 05:00 | |
| CVE-2006-4157 | 6.8 |
Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter.
|
17-10-2018 - 21:33 | 16-08-2006 - 22:04 | |
| CVE-2008-2554 | 7.5 |
Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp and (2) cat parameter to template_archives_cat.asp.
|
11-10-2018 - 20:41 | 05-06-2008 - 21:32 | |
| CVE-2010-0883 | 2.1 |
Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-20
|
17-08-2017 - 01:32 | 13-04-2010 - 22:30 | |
| CVE-2016-5880 | 3.5 |
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
|
28-07-2017 - 01:29 | 01-02-2017 - 20:59 | |
| CVE-2016-5882 | 4.3 |
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
|
28-07-2017 - 01:29 | 01-02-2017 - 20:59 | |
| CVE-2016-5884 | 4.3 |
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
|
28-07-2017 - 01:29 | 01-02-2017 - 20:59 | |
| CVE-2016-6113 | 4.3 |
IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
|
28-07-2017 - 01:29 | 01-02-2017 - 20:59 | |
| CVE-2016-2938 | 4.3 |
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
|
28-07-2017 - 01:29 | 01-02-2017 - 20:59 | |
| CVE-2016-2939 | 4.3 |
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
|
28-07-2017 - 01:29 | 01-02-2017 - 20:59 | |
| CVE-2017-6735 | 7.2 |
A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted system. More Information: CSCvc91092. Known Affected Releases: 6.2.0 6.2.1
|
13-07-2017 - 14:57 | 10-07-2017 - 20:29 | |
| CVE-2016-2950 | 4.0 |
SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
|
03-12-2016 - 03:26 | 30-11-2016 - 11:59 | |
| CVE-2016-2951 | 4.3 |
IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted da
|
03-12-2016 - 03:26 | 30-11-2016 - 11:59 | |
| CVE-2016-2949 | 2.1 |
IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session.
|
03-12-2016 - 03:26 | 30-11-2016 - 11:59 |