| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2003-0466 | 10.0 |
Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to tr
|
08-02-2024 - 15:50 | 27-08-2003 - 04:00 | |
| CVE-2006-1647 | 7.8 |
An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port (UDP port 5496), which ca
|
18-10-2018 - 16:33 | 06-04-2006 - 10:04 | |
| CVE-2006-1648 | 5.0 |
SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service (memory consumption) via a certain packet to the Teacher discovery port that causes SynchronEyes to connect to the attacke
|
18-10-2018 - 16:33 | 06-04-2006 - 10:04 | |
| CVE-2008-1555 | 6.8 |
Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _bFileToInclude parameter.
|
11-10-2018 - 20:35 | 31-03-2008 - 17:44 | |
| CVE-2008-1557 | 5.0 |
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/_b/contentFiles/gBphpInfo.php, which calls the phpinfo function.
|
11-10-2018 - 20:35 | 31-03-2008 - 17:44 | |
| CVE-2008-1556 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) system/actionspages/_b/contentFiles/gBImageViewer.php, (2) ForEditor parameter to (b)
|
11-10-2018 - 20:35 | 31-03-2008 - 17:44 | |
| CVE-2014-4907 | 4.3 |
Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.
|
17-07-2014 - 05:07 | 11-07-2014 - 11:08 |