| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-2143 | 6.5 |
The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by setting a user account to an administrator account.
|
16-07-2021 - 16:21 | 17-04-2014 - 14:55 | |
| CVE-2006-2040 | 6.4 |
Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat, (2) pic and (3) page parameter in index.php; (4) id parameter in postcard.php; and (5) cat parameter in print
|
18-10-2018 - 16:37 | 26-04-2006 - 18:06 | |
| CVE-2007-1798 | 7.2 |
Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long path name.
|
11-10-2017 - 01:31 | 02-04-2007 - 22:19 | |
| CVE-2004-1898 | 10.0 |
Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2009-1681 | 4.3 |
WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not prevent web sites from loading third-party content into a subframe, which allows remote attackers to bypass the Same Origin Policy
|
17-02-2011 - 06:43 | 10-06-2009 - 14:30 |