NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
73837  CVE-2003-0731  CiscoWorks Common Management Foundation (CMF) 2.1 and earlier allows the guest user to gain administrative privileges via a certain POST request to com.cisco.nm.cmf.servlet.CsAuthServlet, possibly involving the "cmd" parameter with a modifyUser value and a modified "priviledges" parameter.    2  10  High  2017-01-03  2008-09-10  View
74349  CVE-2003-1279  S-PLUS 6.0 allows local users to overwrite arbitrary files and possibly elevate privileges via a symlink attack on (1) /tmp/__F8499 by Sqpe, (2) /tmp/PRINT.$$.out by PRINT, (3) /tmp/SUBST$PID.TXT and /tmp/ed.cmds$PID by mustfix.hlinks, (4) /tmp/file.1 and /tmp/file.2 by sas_get, (5) /tmp/file.1 by sas_vars, and (6) /tmp/sgml2html$$tmp /tmp/sgml2html$$tmp1 /tmp/sgml2html$$tmp2 by sglm2html.    2  4.6  Medium  2017-01-03  2008-09-05  View
74605  CVE-2003-1535  Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message.    2  5  Medium  2017-01-03  2008-09-05  View
110  CVE-2008-0119  Unspecified vulnerability in Microsoft Publisher in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 SP1 and earlier allows remote attackers to execute arbitrary code via a Publisher file with crafted object header data that triggers memory corruption, aka "Publisher Object Handler Validation Vulnerability."    2  9.3  High  2017-01-03  2011-03-07  View
366  CVE-2008-0388  SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI.    2  6.8  Medium  2017-01-03  2011-03-07  View

Page 14869 of 17672, showing 5 records out of 88360 total, starting on record 74341, ending on 74345

<<first 14865 | 14866 | 14867 | 14868 | 14869 | 14870 | 14871 | 14872 | 14873 last>>

Actions