| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6328 | 7.2 |
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the mount command. NOTE: the researcher reports a vendor response stating that this is not a security problem
|
07-08-2024 - 16:15 | 13-12-2007 - 19:46 | |
| CVE-2006-4293 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote attackers to inject arbitrary web script or HTML via the (1) dir parameter in dohtaccess.html, or the (2) file parameter in (a) editit.html or (b) showfile.html.
|
17-10-2018 - 21:34 | 22-08-2006 - 17:04 | |
| CVE-2007-1468 | 4.3 |
Cross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows remote attackers to inject arbitrary web script or HTML via an attachment to a defect log entry.
|
16-10-2018 - 16:38 | 16-03-2007 - 21:19 | |
| CVE-2008-4589 | 7.2 |
Heap-based buffer overflow in the tvtumin.sys kernel driver in Lenovo Rescue and Recovery 4.20, including 4.20.0511 and 4.20.0512, allows local users to execute arbitrary code via a long file name.
|
11-10-2018 - 20:52 | 15-10-2008 - 22:45 | |
| CVE-2008-4473 | 9.3 |
Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.
|
11-10-2018 - 20:51 | 17-10-2008 - 19:31 | |
| CVE-2010-4906 | 7.5 |
SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information.
|
10-10-2018 - 20:08 | 08-10-2011 - 10:55 | |
| CVE-2010-4907 | 4.3 |
Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562.
|
10-10-2018 - 20:08 | 08-10-2011 - 10:55 | |
| CVE-2008-4628 | 7.5 |
SQL injection vulnerability in del.php in myWebland miniBloggie 1.0 allows remote attackers to execute arbitrary SQL commands via the post_id parameter.
|
29-09-2017 - 01:32 | 21-10-2008 - 01:18 | |
| CVE-2008-4587 | 9.3 |
Insecure method vulnerability in the MSVNClientDownloadManager61Lib.DownloadManager.1 ActiveX control (ISDM.exe 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the A
|
29-09-2017 - 01:32 | 15-10-2008 - 22:45 | |
| CVE-2008-4574 | 7.5 |
SQL injection vulnerability in default.asp in Ayco Okul Portali allows remote attackers to execute arbitrary SQL commands via the linkid parameter.
|
29-09-2017 - 01:32 | 15-10-2008 - 20:00 | |
| CVE-2008-4592 | 10.0 |
Directory traversal vulnerability in index.php in Sports Clubs Web Panel 0.0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter.
|
29-09-2017 - 01:32 | 16-10-2008 - 18:00 | |
| CVE-2008-4584 | 6.8 |
Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method.
|
29-09-2017 - 01:32 | 15-10-2008 - 22:45 | |
| CVE-2008-4586 | 9.3 |
Insecure method vulnerability in the MVSNCLientWebAgent61.WebAgent.1 ActiveX control (isusweb.dll 6.1.100.61372) in Macrovision FLEXnet Connect 6.1 allows remote attackers to force the download and execution of arbitrary files via the DownloadAndExec
|
29-09-2017 - 01:32 | 15-10-2008 - 22:45 | |
| CVE-2008-4573 | 7.5 |
SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter.
|
29-09-2017 - 01:32 | 15-10-2008 - 20:00 | |
| CVE-2008-4583 | 7.5 |
Insecure method vulnerability in the Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname in the SavePkcs8File method.
|
29-09-2017 - 01:32 | 15-10-2008 - 22:45 | |
| CVE-2008-4572 | 10.0 |
GuildFTPd 0.999.14, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long arguments to the CWD and LIST commands, which triggers heap corruption related to an improper f
|
29-09-2017 - 01:32 | 15-10-2008 - 20:00 | |
| CVE-2006-0657 | 3.5 |
Cross-site scripting (XSS) vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inject arbitrary web script or HTML, and corrupt data, via the (1) username and (2) password parameters, which are not sanitized befor
|
20-07-2017 - 01:29 | 13-02-2006 - 11:06 |