| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-14599 | 7.5 |
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c is vulnerable to an off-by-one error caused by malicious server responses, leading to DoS or possibly unspecified other impact.
|
01-03-2023 - 17:13 | 24-08-2018 - 19:29 | |
| CVE-2012-0823 | 5.0 |
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to
|
29-07-2020 - 18:15 | 23-02-2012 - 20:07 | |
| CVE-2018-14598 | 5.0 |
An issue was discovered in XListExtensions in ListExt.c in libX11 through 1.6.5. A malicious server can send a reply in which the first string overflows, causing a variable to be set to NULL that will be freed later on, leading to DoS (segmentation f
|
06-08-2019 - 17:15 | 24-08-2018 - 19:29 | |
| CVE-2018-14600 | 7.5 |
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes), leading to DoS or remote code execution.
|
06-08-2019 - 17:15 | 24-08-2018 - 19:29 | |
| CVE-2005-3319 | 2.1 |
The apache2handler SAPI (sapi_apache2.c) in the Apache module (mod_php) for PHP 5.x before 5.1.0 final and 4.4 before 4.4.1 final allows attackers to cause a denial of service (segmentation fault) via the session.save_path option in a .htaccess file
|
30-10-2018 - 16:25 | 27-10-2005 - 10:02 | |
| CVE-2012-1021 | 4.3 |
Cross-site scripting (XSS) vulnerability in admin/categories.php in 4images 1.7.10 allows remote attackers to inject arbitrary web script or HTML via the cat_parent_id parameter in an addcat action.
|
29-08-2017 - 01:31 | 08-02-2012 - 00:55 | |
| CVE-2012-1023 | 5.8 |
Open redirect vulnerability in admin/index.php in 4images 1.7.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirect parameter.
|
29-08-2017 - 01:31 | 08-02-2012 - 00:55 | |
| CVE-2012-0982 | 7.5 |
SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter.
|
29-08-2017 - 01:31 | 02-02-2012 - 17:55 | |
| CVE-2012-1022 | 7.5 |
SQL injection vulnerability in admin/categories.php in 4images 1.7.10 remote attackers to execute arbitrary SQL commands via the cat_parent_id parameter in an addcat action.
|
29-08-2017 - 01:31 | 08-02-2012 - 00:55 | |
| CVE-2007-4192 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1 before 20070801 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: it is not clear whether IDE Group updates all D
|
29-07-2017 - 01:32 | 08-08-2007 - 01:17 | |
| CVE-2016-3035 | 5.0 |
IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.
|
05-02-2017 - 20:35 | 01-02-2017 - 20:59 | |
| CVE-2010-4262 | 6.8 |
Stack-based buffer overflow in Xfig 3.2.4 and 3.2.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a FIG image with a crafted color definition.
|
20-01-2011 - 06:46 | 17-12-2010 - 19:00 | |
| CVE-2002-1031 | 5.0 |
KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.
|
05-09-2008 - 20:29 | 04-10-2002 - 04:00 |