| Max CVSS | 10.0 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-1180 | 4.3 |
Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows remote attackers to inject arbitrary web script or HTML via the delivery_mode parameter.
|
11-10-2018 - 20:29 | 06-03-2008 - 00:44 | |
| CVE-2014-1541 | 10.0 |
Use-after-free vulnerability in the RefreshDriverTimer::TickDriver function in the SMIL Animation Controller in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code o
|
28-12-2017 - 02:29 | 11-06-2014 - 10:57 | |
| CVE-2014-1533 | 10.0 |
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allow remote attackers to cause a denial of service (memory corruption and application crash) or poss
|
28-12-2017 - 02:29 | 11-06-2014 - 10:57 | |
| CVE-2014-1538 | 10.0 |
Use-after-free vulnerability in the nsTextEditRules::CreateMozBR function in Mozilla Firefox before 30.0, Firefox ESR 24.x before 24.6, and Thunderbird before 24.6 allows remote attackers to execute arbitrary code or cause a denial of service (heap m
|
28-12-2017 - 02:29 | 11-06-2014 - 10:57 | |
| CVE-2010-0826 | 1.9 |
The Free Software Foundation (FSF) Berkeley DB NSS module (aka libnss-db) 2.2.3pre1 reads the DB_CONFIG file in the current working directory, which allows local users to obtain sensitive information via a symlink attack involving a setgid or setuid
|
19-09-2017 - 01:30 | 05-04-2010 - 15:30 | |
| CVE-2006-1163 | 6.8 |
Cross-site scripting (XSS) vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: it is possible that this issue is resultant from the directory traversal vulnerability.
|
20-07-2017 - 01:30 | 12-03-2006 - 21:02 | |
| CVE-2006-1162 | 5.1 |
Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. (dot dot) in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then acces
|
20-07-2017 - 01:30 | 12-03-2006 - 21:02 | |
| CVE-2003-0509 | 10.0 |
SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.
|
11-07-2017 - 01:29 | 07-08-2003 - 04:00 |