| Max CVSS | 9.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2003-1397 | 4.3 |
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
|
01-03-2022 - 20:21 | 31-12-2003 - 05:00 | |
| CVE-2003-1387 | 7.5 |
Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.
|
01-03-2022 - 20:15 | 31-12-2003 - 05:00 | |
| CVE-2008-4300 | 5.0 |
A certain ActiveX control in adsiis.dll in Microsoft Internet Information Services (IIS) allows remote attackers to cause a denial of service (browser crash) via a long string in the second argument to the GetObject method. NOTE: this issue was disc
|
23-11-2020 - 20:00 | 29-09-2008 - 17:17 | |
| CVE-2006-0156 | 4.3 |
Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php.
|
19-10-2018 - 15:43 | 10-01-2006 - 11:03 | |
| CVE-2006-3989 | 5.1 |
PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter. Successful exploitation requires that "register_globals"
|
17-10-2018 - 21:32 | 05-08-2006 - 00:04 | |
| CVE-2007-5737 | 7.5 |
Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5739 | 5.0 |
Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5738 | 6.8 |
The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/fl
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5507 | 6.4 |
The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (crash) or read potentially sensitive memory via a conn
|
15-10-2018 - 21:45 | 17-10-2007 - 23:17 | |
| CVE-2011-2701 | 5.8 |
The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not properly parse replies from OCSP responders, which allows remote attackers to bypass authentication by using the EAP-TLS protocol with a revoked X.509 clien
|
09-10-2018 - 19:32 | 04-08-2011 - 02:45 | |
| CVE-2006-7071 | 7.5 |
SQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP parameter.
|
11-10-2017 - 01:31 | 02-03-2007 - 21:18 | |
| CVE-2003-1407 | 7.2 |
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1381 | 6.8 |
Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amx_say command.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1394 | 5.0 |
CoffeeCup Software Password Wizard 4.0 stores sensitive information such as usernames and passwords in a .apw file under the web document root with insufficient access control, which allows remote attackers to obtain that information via a direct req
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1395 | 9.0 |
Buffer overflow in KaZaA Media Desktop 2.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a response to the ad server.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1383 | 7.5 |
WEB-ERP 0.1.4 and earlier allows remote attackers to obtain sensitive information via an HTTP request for the logicworks.ini file, which contains the MySQL database username and password.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1382 | 7.5 |
Buffer overflow in ISMail 1.4.3 and earlier allow remote attackers to execute arbitrary code via long domain names in (1) MAIL FROM or (2) RCPT TO fields.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2003-1393 | 8.5 |
Buffer overflow in Gupta SQLBase 8.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long EXECUTE command.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 |