| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-10185 | 5.8 |
Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows una
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2006-4495 | 7.5 |
Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx,
|
17-10-2018 - 21:37 | 31-08-2006 - 22:04 | |
| CVE-2010-1587 | 5.0 |
The Jetty ResourceHandler in Apache ActiveMQ 5.x before 5.3.2 and 5.4.x before 5.4.0 allows remote attackers to read JSP source code via a // (slash slash) initial substring in a URI for (1) admin/index.jsp, (2) admin/queues.jsp, or (3) admin/topics.
|
10-10-2018 - 19:57 | 28-04-2010 - 22:30 | |
| CVE-2011-1510 | 4.3 |
Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.
|
09-10-2018 - 19:31 | 20-09-2011 - 10:55 | |
| CVE-2011-1509 | 5.0 |
The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the n
|
09-10-2018 - 19:31 | 20-09-2011 - 10:55 | |
| CVE-2004-0083 | 10.0 |
Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CV
|
11-10-2017 - 01:29 | 03-03-2004 - 05:00 | |
| CVE-2008-2654 | 10.0 |
Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with so
|
08-08-2017 - 01:31 | 13-06-2008 - 18:41 | |
| CVE-2017-6127 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that (1) change the SSID
|
02-03-2017 - 02:59 | 21-02-2017 - 20:59 |