| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6224 | 5.0 |
The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service (browser crash) via a certain argument to the GetSourceTransport method.
|
14-02-2024 - 01:17 | 04-12-2007 - 18:46 | |
| CVE-2006-0563 | 7.5 |
SQL injection vulnerability in exec.php in PluggedOut Blog 1.9.9c allows remote attackers to execute arbitrary SQL commands via the entryid parameter in a comment_add action.
|
19-10-2018 - 15:45 | 06-02-2006 - 23:02 | |
| CVE-2006-4230 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) lizge or (2) bade parameters.
|
17-10-2018 - 21:34 | 18-08-2006 - 20:04 | |
| CVE-2007-1416 | 10.0 |
PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers to execute arbitrary PHP code via a URL in the formurl parameter.
|
16-10-2018 - 16:38 | 12-03-2007 - 23:19 | |
| CVE-2008-3680 | 5.0 |
The decryption function in Flagship Industries Ventrilo 3.0.2 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) by sending a type 0 packet with an invalid version followed by another packet t
|
11-10-2018 - 20:49 | 14-08-2008 - 19:41 | |
| CVE-2008-3676 | 4.3 |
Unspecified vulnerability in the IMAP server in hMailServer 4.4.1 allows remote authenticated users to cause a denial of service (resource exhaustion or daemon crash) via a long series of IMAP commands.
|
11-10-2018 - 20:49 | 14-08-2008 - 19:41 | |
| CVE-2008-3514 | 5.0 |
VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then ma
|
11-10-2018 - 20:48 | 13-08-2008 - 12:42 | |
| CVE-2008-3443 | 5.0 |
The regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service (infinite loop and crash) via multiple long requests to
|
03-10-2018 - 21:55 | 14-08-2008 - 23:41 | |
| CVE-2008-4588 | 10.0 |
Stack-based buffer overflow in the FTP server in Etype Eserv 3.x, possibly 3.26, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to the ABOR command.
|
29-09-2017 - 01:32 | 15-10-2008 - 22:45 | |
| CVE-2008-3702 | 9.3 |
Multiple stack-based buffer overflows in the Animation GIF ActiveX control in JComSoft AniGIF.ocx 1.12 and 2.47, as used in products such as SpeedBit Download Accelerator Plus (DAP) 8.6, allow remote attackers to execute arbitrary code via a long arg
|
29-09-2017 - 01:31 | 15-08-2008 - 20:41 | |
| CVE-2008-3681 | 7.5 |
components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator.
|
29-09-2017 - 01:31 | 14-08-2008 - 19:41 | |
| CVE-2008-3669 | 7.5 |
SQL injection vulnerability in comments.php in ZeeScripts Reviews Opinions Rating Posting Engine Web-Site PHP Script (aka ZeeReviews) allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
|
29-09-2017 - 01:31 | 13-08-2008 - 19:41 | |
| CVE-2008-3674 | 7.5 |
SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter.
|
29-09-2017 - 01:31 | 13-08-2008 - 19:41 | |
| CVE-2008-3675 | 5.0 |
Directory traversal vulnerability in classes/imgsize.php in Gelato 0.95 allows remote attackers to read arbitrary files via (1) a .. (dot dot) and possibly (2) a full pathname in the img parameter. NOTE: some of these details are obtained from third
|
29-09-2017 - 01:31 | 14-08-2008 - 19:41 | |
| CVE-2008-3673 | 7.5 |
SQL injection vulnerability in browsecats.php in PozScripts Classified Ads allows remote attackers to execute arbitrary SQL commands via the cid parameter, a different vector than CVE-2008-3672.
|
29-09-2017 - 01:31 | 13-08-2008 - 19:41 | |
| CVE-2010-4857 | 7.5 |
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
|
29-08-2017 - 01:29 | 05-10-2011 - 10:55 |