| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-1678 | 5.0 |
Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls, as demonstrated by initial SSL client hand
|
13-02-2023 - 02:18 | 10-07-2008 - 17:41 | |
| CVE-2003-1559 | 5.0 |
Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.
|
23-07-2021 - 12:18 | 31-12-2003 - 05:00 | |
| CVE-2006-0476 | 7.6 |
Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field).
|
19-10-2018 - 15:45 | 31-01-2006 - 11:03 | |
| CVE-2006-4190 | 2.1 |
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation.
|
17-10-2018 - 21:33 | 17-08-2006 - 01:04 | |
| CVE-2008-3147 | 4.7 |
WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%\WeFi\Users\, and uses cleartext for th
|
11-10-2018 - 20:47 | 11-07-2008 - 19:41 | |
| CVE-2008-3149 | 7.8 |
The SNMP daemon in the F5 FirePass 1200 6.0.2 hotfix 3 allows remote attackers to cause a denial of service (daemon crash) by walking the hrSWInstalled OID branch in HOST-RESOURCES-MIB.
|
11-10-2018 - 20:47 | 11-07-2008 - 19:41 | |
| CVE-2008-3151 | 7.5 |
SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_dvd action.
|
11-10-2018 - 20:47 | 11-07-2008 - 22:41 | |
| CVE-2008-3116 | 10.0 |
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.
|
11-10-2018 - 20:46 | 10-07-2008 - 17:41 | |
| CVE-2008-3135 | 7.8 |
Soldner Secret Wars 33724 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a packet with a large numeric value in a 0x80 data block.
|
11-10-2018 - 20:46 | 10-07-2008 - 23:41 | |
| CVE-2008-2304 | 6.8 |
Buffer overflow in Apple Core Image Fun House 2.0 and earlier in CoreImage Examples in Xcode tools before 3.1 allows user-assisted attackers to execute arbitrary code or cause a denial of service (application crash) via a .funhouse file with a string
|
11-10-2018 - 20:40 | 14-07-2008 - 18:41 | |
| CVE-2008-3119 | 7.5 |
SQL injection vulnerability in index.php in DreamPics Builder allows remote attackers to execute arbitrary SQL commands via the page parameter.
|
29-09-2017 - 01:31 | 10-07-2008 - 18:41 | |
| CVE-2008-3131 | 6.8 |
SQL injection vulnerability in chatbox.php in pSys 0.7.0 Alpha, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the showid parameter.
|
29-09-2017 - 01:31 | 10-07-2008 - 23:41 | |
| CVE-2008-4411 | 4.3 |
Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.15.210 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-166
|
08-08-2017 - 01:32 | 13-10-2008 - 20:00 | |
| CVE-2007-1373 | 10.0 |
Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command. NOTE: this might be the same issue as CVE-2006-5961.
|
29-07-2017 - 01:30 | 10-03-2007 - 00:19 | |
| CVE-2010-4850 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Diferior 8.03 allow remote attackers to inject arbitrary web script or HTML via the (1) post_content parameter to post/edit/2/p1.html, related to views/post.php; the (2) slogan parameter to admin
|
14-02-2012 - 04:02 | 27-09-2011 - 10:55 |