| Max CVSS | 7.8 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-5278 | 4.3 |
Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the class_ke
|
10-01-2020 - 20:14 | 07-10-2012 - 20:55 | |
| CVE-2010-3693 | 4.3 |
Cross-site scripting (XSS) vulnerability in Horde Dynamic IMP (DIMP) before 1.1.5, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via vectors related to displaying mailbox names.
|
18-06-2019 - 16:44 | 04-04-2011 - 12:27 | |
| CVE-2004-0169 | 5.0 |
QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.
|
10-10-2017 - 01:30 | 15-03-2004 - 05:00 | |
| CVE-2010-4883 | 2.6 |
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.
|
29-08-2017 - 01:29 | 07-10-2011 - 10:55 | |
| CVE-2010-4821 | 4.3 |
Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.
|
29-08-2017 - 01:29 | 22-10-2012 - 23:55 | |
| CVE-2010-2633 | 7.8 |
Unspecified vulnerability in EMC Disk Library (EDL) before 3.2.7, 3.3.x before 3.3.2 epatch 8, and 4.0.x before 4.0.1 epatch 4 allows remote attackers to cause a denial of service (communication-module crash) by sending a crafted message through TCP.
|
17-08-2017 - 01:32 | 02-08-2010 - 22:00 | |
| CVE-2010-3447 | 4.3 |
Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the file parameter in a view_file action.
|
17-08-2017 - 01:32 | 04-04-2011 - 12:27 | |
| CVE-2009-0669 | 7.5 |
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network protocol.
|
17-08-2017 - 01:29 | 07-08-2009 - 19:30 | |
| CVE-2007-2825 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) links and (2) images.
|
29-07-2017 - 01:31 | 22-05-2007 - 21:30 |