| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-5765 | 7.5 |
SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
|
14-02-2024 - 01:17 | 06-11-2006 - 23:07 | |
| CVE-2011-1948 | 4.3 |
Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
|
13-02-2023 - 04:30 | 06-06-2011 - 19:55 | |
| CVE-2006-2144 | 6.4 |
PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter.
|
18-10-2018 - 16:38 | 02-05-2006 - 10:02 | |
| CVE-2007-3288 | 4.3 |
Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field.
|
16-10-2018 - 16:48 | 20-06-2007 - 21:30 | |
| CVE-2011-2214 | 10.0 |
Unspecified vulnerability in the Open Database Connectivity (ODBC) component in 7T Interactive Graphical SCADA System (IGSS) before 9.0.0.11143 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 20222, which triggers m
|
09-10-2018 - 19:32 | 31-05-2011 - 20:55 | |
| CVE-2011-2330 | 9.0 |
Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, which makes it easier for remote attackers to send requests to restricted pages via a session on TCP p
|
09-10-2018 - 19:32 | 02-06-2011 - 20:55 | |
| CVE-2011-1949 | 3.5 |
Cross-site scripting (XSS) vulnerability in the safe_html filter in Products.PortalTransforms in Plone 2.1 through 4.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CV
|
09-10-2018 - 19:32 | 06-06-2011 - 19:55 | |
| CVE-2011-1950 | 5.5 |
plone.app.users in Plone 4.0 and 4.1 allows remote authenticated users to modify the properties of arbitrary accounts via unspecified vectors, as exploited in the wild in June 2011.
|
09-10-2018 - 19:32 | 06-06-2011 - 19:55 | |
| CVE-2011-1512 | 9.3 |
Heap-based buffer overflow in xlssr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code via a malformed BIFF record in a .xls Excel spreadsheet attachment, aka SPR PRAD8E3HKR.
|
09-10-2018 - 19:31 | 31-05-2011 - 20:55 | |
| CVE-2011-1220 | 9.0 |
Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.
|
09-10-2018 - 19:30 | 02-06-2011 - 20:55 | |
| CVE-2011-1077 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
09-10-2018 - 19:30 | 02-06-2011 - 20:55 | |
| CVE-2011-1026 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in Apache Archiva 1.0 through 1.2.2, and 1.3.x before 1.3.5, allow remote attackers to hijack the authentication of administrators.
|
09-10-2018 - 19:30 | 02-06-2011 - 20:55 | |
| CVE-2008-5770 | 4.3 |
Cross-site scripting (XSS) vulnerability in config/make_config.php in PHP Weather 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
|
29-09-2017 - 01:32 | 30-12-2008 - 20:30 | |
| CVE-2008-5771 | 7.5 |
Directory traversal vulnerability in test.php in PHP Weather 2.2.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter.
|
29-09-2017 - 01:32 | 30-12-2008 - 20:30 | |
| CVE-2011-1938 | 7.5 |
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
|
17-08-2017 - 01:34 | 31-05-2011 - 20:55 | |
| CVE-2011-0923 | 10.0 |
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
|
23-08-2016 - 02:03 | 09-02-2011 - 01:00 | |
| CVE-2011-1937 | 4.3 |
Cross-site scripting (XSS) vulnerability in Webmin 1.540 and earlier allows local users to inject arbitrary web script or HTML via a chfn command that changes the real (aka Full Name) field, related to useradmin/index.cgi and useradmin/user-lib.pl.
|
22-09-2011 - 03:31 | 31-05-2011 - 20:55 |