| Max CVSS | 9.3 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3692 | 7.2 |
Unspecified vulnerability in the VBoxNetAdpCtl configuration tool in Sun VirtualBox 3.0.x before 3.0.8 on Solaris x86, Linux, and Mac OS X allows local users to gain privileges via unknown vectors.
|
17-05-2024 - 17:26 | 13-10-2009 - 10:30 | |
| CVE-2014-2589 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Dashboard Backend service (stats/dashboard.jsp) in SonicWall Network Security Appliance (NSA) 2400 allows remote attackers to inject arbitrary web script or HTML via the sn parameter.
|
02-12-2022 - 22:55 | 24-03-2014 - 16:39 | |
| CVE-2006-0779 | 4.3 |
Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag.
|
29-04-2021 - 15:15 | 19-02-2006 - 00:02 | |
| CVE-2006-0778 | 7.5 |
Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) $u2u_select array parameter to u2u.inc.php and (2) $val variable (fidpw0 cookie value) in today.php.
|
29-04-2021 - 15:15 | 19-02-2006 - 00:02 | |
| CVE-2019-2519 | 5.8 |
Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated atta
|
24-08-2020 - 17:37 | 16-01-2019 - 19:30 | |
| CVE-2007-6593 | 8.8 |
Multiple stack-based buffer overflows in l123sr.dll in Autonomy (formerly Verity) KeyView SDK, as used by IBM Lotus Notes 5.x through 8.x, allow user-assisted remote attackers to execute arbitrary code via the (1) Length and (2) Value fields for cert
|
15-10-2018 - 21:55 | 28-12-2007 - 21:46 | |
| CVE-2011-1074 | 1.9 |
crontab.c in crontab in FreeBSD allows local users to determine the existence of arbitrary directories via a command-line argument composed of a directory name concatenated with a directory traversal sequence that leads to the /etc/crontab pathname.
|
09-10-2018 - 19:30 | 04-03-2011 - 23:00 | |
| CVE-2011-1073 | 1.9 |
crontab.c in crontab in FreeBSD and Apple Mac OS X allows local users to (1) determine the existence of arbitrary files via a symlink attack on a /tmp/crontab.XXXXXXXXXX temporary file and (2) perform MD5 checksum comparisons on arbitrary pairs of fi
|
09-10-2018 - 19:30 | 04-03-2011 - 23:00 | |
| CVE-2012-4560 | 7.5 |
Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
|
29-08-2017 - 01:32 | 30-11-2012 - 22:55 | |
| CVE-2012-4562 | 7.5 |
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly s
|
29-08-2017 - 01:32 | 30-11-2012 - 22:55 | |
| CVE-2012-4559 | 6.8 |
Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (5) try_publickey_from_file fun
|
29-08-2017 - 01:32 | 30-11-2012 - 22:55 | |
| CVE-2012-4561 | 5.0 |
The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_session_id functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to c
|
29-08-2017 - 01:32 | 30-11-2012 - 22:55 | |
| CVE-2017-0087 | 9.3 |
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to execute arbitrary code via a crafted web site, aka "Uniscribe Remote Code Execution Vulnerability." This vulnerability is diffe
|
16-08-2017 - 01:29 | 17-03-2017 - 00:59 | |
| CVE-2003-1347 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Geeklog 1.3.7 allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to comment.php, (2) uid parameter to profiles.php, (3) uid to users.php, and (4) homepage fie
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 |