| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-4300 | 5.0 |
A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method. NOTE: this issue was disc
|
23-11-2020 - 20:00 | 29-09-2008 - 17:17 | |
| CVE-2006-0714 | 5.0 |
Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the adodbpath parameter.
|
19-10-2018 - 15:45 | 15-02-2006 - 11:06 | |
| CVE-2006-4283 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in SOLMETRA SPAW Editor 1.0.6 and 1.0.7 allow remote attackers to execute arbitrary PHP code via a URL in the spaw_dir parameter in dialogs/ scripts including (1) a.php, (2) collorpicker.php, (3) img
|
17-10-2018 - 21:34 | 22-08-2006 - 17:04 | |
| CVE-2007-1486 | 10.0 |
PHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook before 1.7.3 allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to admin.php, probably due to a dynamic variable e
|
16-10-2018 - 16:38 | 16-03-2007 - 21:19 | |
| CVE-2007-6312 | 4.3 |
Cross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in Websense Enterprise and Web Security Suite 6.3 allows remote attackers to inject arbitrary web script or HTML via the username field.
|
15-10-2018 - 21:51 | 11-12-2007 - 21:46 | |
| CVE-2008-4299 | 5.0 |
A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProper
|
11-10-2018 - 20:51 | 29-09-2008 - 17:17 | |
| CVE-2008-4324 | 5.0 |
The user interface event dispatcher in Mozilla Firefox 3.0.3 on Windows XP SP2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a series of keypress, click, onkeydown, onkeyup, onmousedown, and
|
11-10-2018 - 20:51 | 29-09-2008 - 20:09 | |
| CVE-2008-4120 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.
|
11-10-2018 - 20:50 | 29-09-2008 - 17:17 | |
| CVE-2008-3827 | 9.3 |
Multiple integer underflows in the Real demuxer (demux_real.c) in MPlayer 1.0_rc2 and earlier allow remote attackers to cause a denial of service (process termination) and possibly execute arbitrary code via a crafted video file that causes the strea
|
11-10-2018 - 20:49 | 29-09-2008 - 19:25 | |
| CVE-2008-2474 | 10.0 |
Buffer overflow in x87 before 3.5.5 in ABB Process Communication Unit 400 (PCU400) 4.4 through 4.6 allows remote attackers to execute arbitrary code via a crafted packet using the (1) IEC60870-5-101 or (2) IEC60870-5-104 communication protocol to the
|
11-10-2018 - 20:41 | 29-09-2008 - 17:17 | |
| CVE-2008-4602 | 6.5 |
Directory traversal vulnerability in index.php in Post Affiliate Pro 2.0 allows remote authenticated users to read and possibly execute arbitrary local files via a .. (dot dot) in the md parameter.
|
29-09-2017 - 01:32 | 18-10-2008 - 00:18 | |
| CVE-2008-4376 | 7.5 |
SQL injection vulnerability in index.php in Live TV Script allows remote attackers to execute arbitrary SQL commands via the mid parameter.
|
29-09-2017 - 01:32 | 01-10-2008 - 15:38 | |
| CVE-2008-4321 | 9.3 |
Buffer overflow in FlashGet (formerly JetCar) FTP 1.9 allows remote FTP servers to execute arbitrary code via a long response to the PWD command.
|
29-09-2017 - 01:32 | 29-09-2008 - 19:25 | |
| CVE-2008-4318 | 10.0 |
Observer 0.3.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the query parameter to (1) whois.php or (2) netcmd.php.
|
29-09-2017 - 01:32 | 29-09-2008 - 19:25 | |
| CVE-2008-4380 | 7.8 |
The web interface in Samsung DVR SHR2040 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, related to the filter for configuration properties and "/x" characters.
|
29-09-2017 - 01:32 | 01-10-2008 - 15:38 | |
| CVE-2010-4877 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter.
|
14-02-2012 - 04:02 | 07-10-2011 - 10:55 |