| Max CVSS | 9.3 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-1718 | 4.3 |
The Web Agents component in CA SiteMinder R6 before SP6 CR2 and R12 before SP3 CR2 does not properly handle multi-line headers, which allows remote authenticated users to conduct impersonation attacks and gain privileges via crafted data.
|
12-04-2021 - 14:17 | 27-04-2011 - 01:25 | |
| CVE-2011-1719 | 9.3 |
Multiple stack-based buffer overflows in the Web Viewer ActiveX controls in CA Output Management Web Viewer 11.0 and 11.5 allow remote attackers to execute arbitrary code via (1) a long SRC property value to the PPSViewer ActiveX control in PPSView.o
|
09-04-2021 - 18:51 | 27-04-2011 - 01:25 | |
| CVE-2006-2117 | 4.3 |
Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page.
|
18-10-2018 - 16:38 | 01-05-2006 - 21:06 | |
| CVE-2006-5716 | 5.0 |
Directory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to include local files via a .. (dot dot) sequence in the chemin parameter, when the aff_news parameter is not set to "1."
|
17-10-2018 - 21:44 | 04-11-2006 - 01:07 | |
| CVE-2007-3340 | 7.8 |
BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a large number of requests for nonexistent pages.
|
16-10-2018 - 16:48 | 21-06-2007 - 22:30 | |
| CVE-2008-5747 | 5.0 |
F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a "corrupted" header that still allows the program to be executed. NOTE: due to an error in the initial disclosure, F-secure was incorr
|
11-10-2018 - 20:56 | 29-12-2008 - 15:24 | |
| CVE-2010-4793 | 7.5 |
SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter.
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2010-4800 | 7.5 |
SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2010-4801 | 6.0 |
Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filepath parameter.
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2010-4795 | 7.5 |
SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. NOTE: some of these details are
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2010-4799 | 6.8 |
Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to authenticate.php and the (3) ID parameter
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2010-4792 | 4.3 |
Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter.
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2010-4797 | 7.5 |
Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2010-4794 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a js
|
17-08-2017 - 01:33 | 27-04-2011 - 00:55 | |
| CVE-2011-0418 | 4.0 |
The glob implementation in Pure-FTPd before 1.0.32, and in libc in NetBSD 5.1, does not properly expand expressions containing curly brackets, which allows remote authenticated users to cause a denial of service (memory consumption) via a crafted FTP
|
22-09-2011 - 03:28 | 24-05-2011 - 23:55 |