| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-1997 | 9.0 |
Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE
|
17-01-2023 - 17:19 | 28-04-2008 - 20:05 | |
| CVE-2011-2841 | 6.8 |
Google Chrome before 14.0.835.163 does not properly perform garbage collection during the processing of PDF documents, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document.
|
08-05-2020 - 18:59 | 19-09-2011 - 12:02 | |
| CVE-2006-2202 | 6.4 |
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter.
|
18-10-2018 - 16:38 | 04-05-2006 - 17:06 | |
| CVE-2006-5833 | 7.5 |
gbcms_php_files/up_loader.php GreenBeast CMS 1.3 does not require authentication to upload files, which allows remote attackers to cause a denial of service (disk consumption) and execute arbitrary code by uploading arbitrary files, such as executing
|
17-10-2018 - 21:45 | 10-11-2006 - 01:07 | |
| CVE-2007-3259 | 5.0 |
Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via (1) an invalid month[] parameter to calendar.php, (2) an invalid catview[] parameter to cal_week.php in a week operation, (3) an invalid ycyear[] parameter to yearcal
|
16-10-2018 - 16:48 | 26-06-2007 - 17:30 | |
| CVE-2008-5793 | 6.8 |
Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfig_absolute_path] parameter to (a
|
29-09-2017 - 01:32 | 31-12-2008 - 11:30 | |
| CVE-2010-4861 | 7.5 |
SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
|
29-08-2017 - 01:29 | 05-10-2011 - 10:55 | |
| CVE-2010-4857 | 7.5 |
SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.
|
29-08-2017 - 01:29 | 05-10-2011 - 10:55 | |
| CVE-2010-4860 | 7.5 |
SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
29-08-2017 - 01:29 | 05-10-2011 - 10:55 | |
| CVE-2010-4853 | 7.5 |
SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.
|
29-08-2017 - 01:29 | 05-10-2011 - 10:55 | |
| CVE-2000-1247 | 2.1 |
The default configuration of the jserv-status handler in jserv.conf in Apache JServ 1.1.2 includes an "allow from 127.0.0.1" line, which allows local users to discover JDBC passwords or other sensitive information via a direct request to the jserv/ U
|
29-08-2017 - 01:29 | 05-10-2011 - 02:56 | |
| CVE-2011-2443 | 9.3 |
Multiple buffer overflows in Adobe Photoshop Elements 8.0 and earlier allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted (1) .grd or (2) .abr file, a related
|
14-02-2012 - 04:07 | 04-10-2011 - 20:55 | |
| CVE-2010-4855 | 7.5 |
SQL injection vulnerability in oku.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the makale_id parameter.
|
14-02-2012 - 04:02 | 05-10-2011 - 10:55 | |
| CVE-2010-4858 | 5.0 |
Directory traversal vulnerability in team.rc5-72.php in DNET Live-Stats 0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the showlang parameter.
|
14-02-2012 - 04:02 | 05-10-2011 - 10:55 | |
| CVE-2010-4859 | 7.5 |
SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action.
|
14-02-2012 - 04:02 | 05-10-2011 - 10:55 |