| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-7096 | 7.5 |
Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
10-12-2018 - 19:29 | 13-12-2013 - 20:08 | |
| CVE-2016-3115 | 5.5 |
Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_
|
11-09-2018 - 10:29 | 22-03-2016 - 10:59 | |
| CVE-2007-3069 | 4.6 |
xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence.
|
11-10-2017 - 01:32 | 06-06-2007 - 10:30 | |
| CVE-2010-3421 | 4.3 |
Cross-site scripting (XSS) vulnerability in AffiliateLogin.asp in ProductCart 3, 4.1 SP1, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the redirectUrl parameter, a different vector than CVE-2004-2174
|
17-08-2017 - 01:32 | 16-09-2010 - 22:00 | |
| CVE-2010-3426 | 7.5 |
Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
|
17-08-2017 - 01:32 | 16-09-2010 - 22:00 | |
| CVE-2010-3418 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in NetArt Media Car Portal 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) car_id parameter to index.php and (2) y parameter to include/images.php.
|
17-08-2017 - 01:32 | 16-09-2010 - 22:00 | |
| CVE-2010-3466 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in the hosted_signup module in NetArt Media iBoutique.MALL 1.2 allows remote attackers to inject arbitrary web script or HTML via the tmpl parameter. NOTE: some of these details are obtained from
|
17-08-2017 - 01:32 | 17-09-2010 - 20:00 | |
| CVE-2010-2366 | 4.3 |
Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
14-09-2010 - 04:00 | 13-09-2010 - 21:00 | |
| CVE-2005-2332 | 4.3 |
Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script or HTML via the username parameter to (1) admin.php or (2) login.php.
|
05-09-2008 - 20:51 | 20-07-2005 - 04:00 | |
| CVE-2002-0510 | 5.0 |
The UDP implementation in Linux 2.4.x kernels keeps the IP Identification field at 0 for all non-fragmented packets, which could allow remote attackers to determine that a target system is running Linux.
|
05-09-2008 - 20:28 | 12-08-2002 - 04:00 |