| Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-1071 | 5.1 |
The GNU C Library (aka glibc or libc6) before 2.12.2 and Embedded GLIBC (EGLIBC) allow context-dependent attackers to execute arbitrary code or cause a denial of service (memory consumption) via a long UTF8 string that is used in an fnmatch call, aka
|
13-02-2023 - 03:23 | 08-04-2011 - 15:17 | |
| CVE-2010-3695 | 4.3 |
Cross-site scripting (XSS) vulnerability in fetchmailprefs.php in Horde IMP before 4.3.8, and Horde Groupware Webmail Edition before 1.2.7, allows remote attackers to inject arbitrary web script or HTML via the fm_id parameter in a fetchmail_prefs_sa
|
18-06-2019 - 16:44 | 31-03-2011 - 22:55 | |
| CVE-2011-1554 | 4.3 |
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an inva
|
06-03-2019 - 16:30 | 31-03-2011 - 23:55 | |
| CVE-2011-1553 | 4.3 |
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that trig
|
06-03-2019 - 16:30 | 31-03-2011 - 23:55 | |
| CVE-2011-1552 | 4.3 |
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a dif
|
06-03-2019 - 16:30 | 31-03-2011 - 23:55 | |
| CVE-2011-0764 | 6.8 |
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF docume
|
06-03-2019 - 16:30 | 31-03-2011 - 22:55 | |
| CVE-2006-2093 | 2.6 |
Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate s
|
18-10-2018 - 16:38 | 29-04-2006 - 10:02 | |
| CVE-2006-5711 | 5.0 |
ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI.
|
17-10-2018 - 21:44 | 04-11-2006 - 01:07 | |
| CVE-2007-3311 | 7.5 |
SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
16-10-2018 - 16:48 | 21-06-2007 - 10:30 | |
| CVE-2011-1546 | 7.5 |
Multiple SQL injection vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.3 allow remote attackers to execute arbitrary SQL commands via the s parameter to (1) a_viewusers.php or (2) keysearch.php; and allow remote authenticated adminis
|
09-10-2018 - 19:31 | 04-04-2011 - 12:27 | |
| CVE-2011-1126 | 6.9 |
VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users to gain privileges via a Trojan horse shared library in an unspecified directory.
|
09-10-2018 - 19:30 | 04-04-2011 - 12:27 | |
| CVE-2008-5739 | 7.5 |
SQL injection vulnerability in evb/check_url.php in Pligg CMS 9.9.5 Beta allows remote attackers to execute arbitrary SQL commands via the url parameter.
|
29-09-2017 - 01:32 | 26-12-2008 - 18:30 | |
| CVE-2011-1563 | 10.0 |
Multiple stack-based buffer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via (1) a long username in an On_FC_CONNECT_FCS_LOGIN packet, and crafted (2) On
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 | |
| CVE-2011-1565 | 10.0 |
Directory traversal vulnerability in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allows remote attackers to (1) read (opcode 0x3) or (2) create or write (opcode 0x2) arbitrary files via ..\
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 | |
| CVE-2011-1567 | 10.0 |
Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System (IGSS) allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via craf
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 | |
| CVE-2011-1564 | 10.0 |
Multiple integer overflows in the HMI application in DATAC RealFlex RealWin 2.1 (Build 6.1.10.10) and earlier allow remote attackers to execute arbitrary code via crafted (1) On_FC_MISC_FCS_MSGBROADCAST and (2) On_FC_MISC_FCS_MSGSEND packets, which t
|
22-09-2011 - 03:30 | 05-04-2011 - 15:19 | |
| CVE-2011-0894 | 5.5 |
Unspecified vulnerability in HP Operations 9.10 on UNIX platforms allows remote authenticated users to bypass intended access restrictions via unknown vectors.
|
22-09-2011 - 03:29 | 04-04-2011 - 12:27 | |
| CVE-2011-0893 | 4.3 |
Cross-site scripting (XSS) vulnerability in HP Operations 9.10 on UNIX platforms allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
22-09-2011 - 03:29 | 04-04-2011 - 12:27 |