| Max CVSS | 8.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-1770 | 7.8 |
Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows remote attackers to cause a denial of service via a Datagram Congestion Control Protocol (DCCP) packet with an invalid feature optio
|
13-02-2023 - 04:30 | 24-06-2011 - 20:55 | |
| CVE-2005-4463 | 5.0 |
WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/vars.php, (2) wp-content/plugins/hello.php, (3) wp-admin/upgrade-functions.php, (4) wp-admin/edit-form.php, (5) wp-settings.php, an
|
19-10-2018 - 15:41 | 21-12-2005 - 22:03 | |
| CVE-2006-3678 | 5.0 |
TippingPoint IPS running the TippingPoint Operating System (TOS) before 2.2.4.6519 allows remote attackers to "force the device into layer 2 fallback (L2FB)", causing a denial of service (page fault), via a malformed packet.
|
18-10-2018 - 16:48 | 26-07-2006 - 23:04 | |
| CVE-2006-7030 | 5.0 |
Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possibly involving applet and base tags without required arguments, which triggers a null pointer dereference in ms
|
16-10-2018 - 16:29 | 23-02-2007 - 03:28 | |
| CVE-2007-3569 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow remote attackers to inject arbitrary web script or HTML via the (1) updateform and (2) displayform parameter to (a) gateway/gateway.exe; the (3) TERMS, (4)
|
15-10-2018 - 21:29 | 05-07-2007 - 19:30 | |
| CVE-2007-3621 | 7.5 |
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell commands via the (1) IN and (2) OUT parameters.
|
15-10-2018 - 21:29 | 09-07-2007 - 16:30 | |
| CVE-2007-3639 | 4.0 |
WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) the _wp_http_referer parameter to wp-pass.php, related to the wp_get_referer function in wp-includes/functions.
|
15-10-2018 - 21:29 | 10-07-2007 - 00:30 | |
| CVE-2007-3619 | 5.0 |
Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. Successful exploitation requires that "magic_quotes_gpc" is disabled.
|
15-10-2018 - 21:29 | 09-07-2007 - 16:30 | |
| CVE-2007-3597 | 8.5 |
Session fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack web sessions by setting the Cookie parameter.
|
15-10-2018 - 21:29 | 06-07-2007 - 18:30 | |
| CVE-2007-3573 | 6.8 |
Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the (1) acparentid or (2) acitemid parameter to an unspecified component, different vectors than CVE-2006-1421.
|
15-10-2018 - 21:29 | 05-07-2007 - 20:30 | |
| CVE-2007-3613 | 4.3 |
Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter.
|
15-10-2018 - 21:29 | 06-07-2007 - 19:30 | |
| CVE-2007-3614 | 7.5 |
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdb
|
15-10-2018 - 21:29 | 06-07-2007 - 19:30 | |
| CVE-2007-3588 | 7.5 |
SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via the UserID parameter to sub-join.php. NOTE: this may be the same as CVE-2006-3691.4.
|
15-10-2018 - 21:29 | 05-07-2007 - 20:30 | |
| CVE-2007-3575 | 7.5 |
SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrary SQL commands via the logindomain parameter to members.php.
|
15-10-2018 - 21:29 | 05-07-2007 - 20:30 | |
| CVE-2008-4169 | 7.5 |
SQL injection vulnerability in detaillist.php in iScripts EasyIndex, possibly 1.0, allows remote attackers to execute arbitrary SQL commands via the produid parameter.
|
29-09-2017 - 01:32 | 22-09-2008 - 18:34 | |
| CVE-2003-1463 | 3.5 |
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) rea
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 |