| Max CVSS | 7.2 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-4128 | 7.2 |
GNU GRand Unified Bootloader (GRUB) 2 1.97 only compares the submitted portion of a password with the actual password, which makes it easier for physically proximate attackers to conduct brute force attacks and bypass authentication by submitting a p
|
16-01-2024 - 01:15 | 01-12-2009 - 16:30 | |
| CVE-2011-1467 | 5.0 |
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a rela
|
30-10-2018 - 16:26 | 20-03-2011 - 02:00 | |
| CVE-2006-1070 | 4.3 |
Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the f parameter.
|
18-10-2018 - 16:30 | 08-03-2006 - 00:02 | |
| CVE-2006-1071 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
|
18-10-2018 - 16:30 | 08-03-2006 - 00:02 | |
| CVE-2014-6270 | 6.8 |
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, whic
|
08-09-2017 - 01:29 | 12-09-2014 - 14:55 | |
| CVE-2014-6291 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Alphabetic Sitemap (alpha_sitemap) extension 0.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
08-09-2017 - 01:29 | 03-10-2014 - 14:55 | |
| CVE-2003-1381 | 6.8 |
Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amx_say command.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2017-1155 | 4.0 |
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference #: 1999754.
|
23-03-2017 - 19:47 | 20-03-2017 - 16:59 | |
| CVE-2014-7141 | 6.4 |
The pinger in Squid 3.x before 3.4.8 allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and crash) via a crafted type in an (1) ICMP or (2) ICMP6 packet.
|
28-11-2016 - 19:12 | 26-11-2014 - 15:59 |