| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-4151 | 6.8 |
SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than
|
14-02-2024 - 01:17 | 03-11-2010 - 20:00 | |
| CVE-2010-2947 | 10.0 |
Heap-based buffer overflow in the HX_split function in string.c in libHX before 3.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a string that is inconsistent with the expected number of field
|
13-02-2023 - 04:21 | 24-08-2010 - 20:00 | |
| CVE-2009-0855 | 4.3 |
Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.23 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
02-12-2022 - 18:15 | 09-03-2009 - 21:30 | |
| CVE-2007-3007 | 5.0 |
PHP 5 before 5.2.3 does not enforce the open_basedir or safe_mode restriction in certain cases, which allows context-dependent attackers to determine the existence of arbitrary files by checking if the readfile function returns a string. NOTE: this
|
29-08-2022 - 20:07 | 04-06-2007 - 17:30 | |
| CVE-2010-3680 | 4.0 |
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
|
17-12-2019 - 20:23 | 11-01-2011 - 20:00 | |
| CVE-2010-3682 | 4.0 |
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers
|
17-12-2019 - 20:23 | 11-01-2011 - 20:00 | |
| CVE-2010-3678 | 4.0 |
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.
|
17-12-2019 - 20:23 | 11-01-2011 - 20:00 | |
| CVE-2005-1218 | 5.0 |
The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.
|
30-04-2019 - 14:27 | 10-08-2005 - 04:00 | |
| CVE-2015-0251 | 4.0 |
The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
|
30-10-2018 - 16:27 | 08-04-2015 - 18:59 | |
| CVE-2013-3622 | 9.0 |
Buffer overflow in logout.cgi in the Intelligent Platform Management Interface (IPMI) with firmware before 3.15 (SMT_X9_315) on Supermicro X9 generation motherboards allows remote authenticated users to execute arbitrary code via the SID parameter.
|
15-11-2017 - 02:29 | 10-12-2013 - 16:11 | |
| CVE-2016-7148 | 4.3 |
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=AttachFile (via page name) component.
|
01-02-2017 - 02:59 | 10-11-2016 - 17:59 | |
| CVE-2016-7146 | 4.3 |
MoinMoin 1.9.8 allows remote attackers to conduct "JavaScript injection" attacks by using the "page creation or crafted URL" approach, related to a "Cross Site Scripting (XSS)" issue affecting the action=fckdialog&dialog=attachment (via page name) co
|
01-02-2017 - 02:59 | 10-11-2016 - 17:59 | |
| CVE-2002-0429 | 3.6 |
The iBCS routines in arch/i386/kernel/traps.c for Linux kernels 2.4.18 and earlier on x86 systems allow local users to kill arbitrary processes via a a binary compatibility interface (lcall).
|
18-10-2016 - 02:20 | 12-08-2002 - 04:00 | |
| CVE-2009-1173 | 2.1 |
IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.3 uses weak permissions (777) for files associated with unspecified "interim fixes," which allows attackers to modify files that would not have been accessible if the intended 755 permissions we
|
24-10-2014 - 05:37 | 31-03-2009 - 14:09 | |
| CVE-2010-3055 | 7.5 |
The configuration setup script (aka scripts/setup.php) in phpMyAdmin 2.11.x before 2.11.10.1 does not properly restrict key names in its output file, which allows remote attackers to execute arbitrary PHP code via a crafted POST request.
|
28-01-2011 - 05:00 | 24-08-2010 - 20:00 |