| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-1959 | 7.5 |
PHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72 and earlier, Gold 7.63 and earlier, and Server 8.23 and earlier allows remote attackers to execute arbitrary code via a URL in the rf parameter.
|
18-10-2018 - 16:37 | 21-04-2006 - 10:02 | |
| CVE-2006-5379 | 7.5 |
The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a
|
17-10-2018 - 21:42 | 18-10-2006 - 04:06 | |
| CVE-2007-2887 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the No parameter in the Sayfa page.
|
16-10-2018 - 16:46 | 30-05-2007 - 01:30 | |
| CVE-2008-1118 | 7.5 |
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoi
|
11-10-2018 - 20:29 | 14-03-2008 - 20:44 | |
| CVE-2008-5592 | 5.0 |
Nightfall Personal Diary 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for users-zza21.mdb.
|
29-09-2017 - 01:32 | 16-12-2008 - 19:07 | |
| CVE-2008-5591 | 4.3 |
Cross-site scripting (XSS) vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "login fields." NOTE: some of these details are obtaine
|
29-09-2017 - 01:32 | 16-12-2008 - 19:07 |