Max CVSS | 10.0 | Min CVSS | 5.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2011-4710 | 7.5 |
Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pixie_user parameter and (2) Referer HTTP header in a request to the default URI.
|
29-03-2021 - 12:16 | 08-12-2011 - 19:55 | |
CVE-2017-2460 | 6.8 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a d
|
08-03-2019 - 16:06 | 02-04-2017 - 01:59 | |
CVE-2006-2516 | 5.1 |
mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite variables such as $xoopsOption['nocommon'] and conduct directory traversal attacks or include PHP files via (1) xoopsConfig[language] t
|
18-10-2018 - 16:40 | 22-05-2006 - 22:02 | |
CVE-2011-5012 | 10.0 |
Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflecti
|
29-08-2017 - 01:30 | 25-12-2011 - 01:55 | |
CVE-2011-5005 | 7.5 |
Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to th
|
29-08-2017 - 01:30 | 25-12-2011 - 01:55 | |
CVE-2011-4801 | 7.5 |
SQL injection vulnerability in akeyActivationLogin.do in Authenex Web Management Control in Authenex Strong Authentication System (ASAS) Server 3.1.0.2 and 3.1.0.3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
18-08-2013 - 06:24 | 14-12-2011 - 00:55 | |
CVE-2010-5081 | 9.3 |
Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file.
|
28-12-2011 - 05:00 | 25-12-2011 - 01:55 | |
CVE-2011-4671 | 7.5 |
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).
|
13-12-2011 - 04:09 | 02-12-2011 - 18:55 | |
CVE-2011-2917 | 7.5 |
SQL injection vulnerability in administrator/index2.php in Mambo CMS 4.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the zorder parameter.
|
09-12-2011 - 05:00 | 08-12-2011 - 19:55 |