| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-0049 | 5.0 |
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted em
|
14-02-2024 - 01:17 | 04-02-2011 - 01:00 | |
| CVE-2006-2088 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Devsyn Open Bulletin Board (OpenBB) 1.0.6 allow remote attackers to inject arbitrary web script or HTML via (1) the FID parameter in board.php and (2) the TID parameter in read.php. NOTE: the SQ
|
18-10-2018 - 16:38 | 29-04-2006 - 10:02 | |
| CVE-2006-5652 | 4.3 |
Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for
|
17-10-2018 - 21:44 | 03-11-2006 - 00:07 | |
| CVE-2007-3250 | 7.5 |
SQL injection vulnerability in mod_banners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands via the mb_tracker cookie. NOTE: the product was patched without updating the version number; later download
|
16-10-2018 - 16:48 | 18-06-2007 - 10:30 | |
| CVE-2008-1724 | 9.3 |
Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrar
|
11-10-2018 - 20:36 | 11-04-2008 - 19:05 | |
| CVE-2010-4435 | 10.0 |
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the Jan
|
10-10-2018 - 20:08 | 19-01-2011 - 17:00 | |
| CVE-2011-0885 | 10.0 |
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) we
|
09-10-2018 - 19:29 | 08-02-2011 - 22:00 | |
| CVE-2011-0886 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 allow remote attackers to (1) hijack the intranet connectivity of arbitrary users for
|
09-10-2018 - 19:29 | 08-02-2011 - 22:00 | |
| CVE-2011-0887 | 4.3 |
The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack o
|
09-10-2018 - 19:29 | 08-02-2011 - 22:00 | |
| CVE-2011-0772 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to inject arbitrary web script or HTML via the (1) color parameter to includes/blogroll.php or (2) src parameter to
|
09-10-2018 - 19:29 | 04-02-2011 - 01:00 | |
| CVE-2008-5712 | 5.0 |
The HTML parser in KDE Konqueror 3.5.9 allows remote attackers to cause a denial of service (application crash) via (1) a long COLOR attribute in an HR element; or a long (a) BGCOLOR or (b) BORDERCOLOR attribute in a (2) TABLE, (3) TD, or (4) TR elem
|
29-09-2017 - 01:32 | 24-12-2008 - 18:29 | |
| CVE-2011-0522 | 6.8 |
The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.c) in VideoLAN VLC Media Player 1.1 before 1.1.6-rc allows remote attackers to execute arbitrary code via a su
|
19-09-2017 - 01:32 | 07-02-2011 - 21:00 | |
| CVE-2010-4506 | 6.2 |
Passlogix v-GO Self-Service Password Reset (SSPR) and OEM before 7.0A allows physically proximate attackers to execute arbitrary programs without authentication by triggering use of an invalid SSL certificate and using the Internet Explorer interface
|
17-08-2017 - 01:33 | 07-02-2011 - 21:00 | |
| CVE-2011-0773 | 4.3 |
Cross-site scripting (XSS) vulnerability in pivotx/modules/module_image.php in PivotX before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the image parameter.
|
17-08-2017 - 01:33 | 04-02-2011 - 01:00 | |
| CVE-2011-0535 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in the Users module in Zikula before 1.2.5 allows remote attackers to hijack the authentication of administrators for requests that change account privileges via an edit access_permissions action to ind
|
22-09-2011 - 03:28 | 08-02-2011 - 22:00 | |
| CVE-2011-0354 | 10.0 |
The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an uns
|
22-09-2011 - 03:28 | 03-02-2011 - 16:00 |