NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 2465 | CVE-2008-2558 | CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote attackers to sniff the cookies if they are sent over HTTP. | 2 | 5 | Medium | 2017-01-03 | 2008-09-10 | View | |
| 59216 | CVE-2006-0478 | CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases. We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment." | 2 | 7.5 | High | 2016-12-20 | 2011-03-07 | View | |
| 58788 | CVE-2006-0045 | crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges. | 2 | 7.2 | High | 2016-12-20 | 2011-03-07 | View | |
| 70567 | CVE-2004-0103 | crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-10 | View | |
| 29953 | CVE-2014-1272 | CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink. | 2 | 6.3 | Medium | 2017-01-19 | 2014-03-14 | View |
Page 14980 of 17672, showing 5 records out of 88360 total, starting on record 74896, ending on 74900
