| Max CVSS | 8.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-1963 | 4.3 |
The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thunderbird 5.0 through 13.0, Thunderbird ESR 10.x before 10.0.6, and SeaMonkey before 2.11 does not properly restrict the strings pl
|
21-10-2024 - 13:55 | 18-07-2012 - 10:26 | |
| CVE-2018-0371 | 6.8 |
A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient validation of incoming HTTP requests. An attacker
|
09-10-2019 - 23:31 | 21-06-2018 - 11:29 | |
| CVE-2011-0515 | 2.1 |
KisKrnl.sys 2011.1.13.89 and earlier in Kingsoft AntiVirus 2011 SP5.2 allows local users to cause a denial of service (crash) via a crafted request that is not properly handled by the KiFastCallEntry hook.
|
30-10-2018 - 16:26 | 20-01-2011 - 19:00 | |
| CVE-2010-4331 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default_news or (2) sponsors cookies, which are not properly handled by (a) controllers/index.ctrl.php or
|
10-10-2018 - 20:08 | 20-01-2011 - 19:00 | |
| CVE-2002-0577 | 2.1 |
Vulnerability in passwd for HP-UX 11.00 and 11.11 allows local users to corrupt the password file and cause a denial of service.
|
11-10-2017 - 01:29 | 18-06-2002 - 04:00 | |
| CVE-2010-4031 | 8.0 |
Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors.
|
17-08-2017 - 01:33 | 02-11-2010 - 02:26 | |
| CVE-2011-0512 | 6.8 |
SQL injection vulnerability in team.php in the Teams Structure module 3.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the team_id parameter.
|
17-08-2017 - 01:33 | 20-01-2011 - 19:00 | |
| CVE-2011-0516 | 7.5 |
SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter.
|
17-08-2017 - 01:33 | 20-01-2011 - 19:00 | |
| CVE-2005-0359 | 6.4 |
The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of se
|
11-07-2017 - 01:32 | 23-08-2005 - 04:00 | |
| CVE-2005-0357 | 7.5 |
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privilege
|
11-07-2017 - 01:32 | 23-08-2005 - 04:00 | |
| CVE-2005-0358 | 7.5 |
EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.
|
11-07-2017 - 01:32 | 23-08-2005 - 04:00 | |
| CVE-2016-8921 | 6.5 |
IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
|
13-02-2017 - 21:52 | 01-02-2017 - 20:59 |