NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 6394 | CVE-2008-6663 | SQL injection vulnerability in profile.php in PHPAuctions.info PHPAuctions (aka PHPAuctionSystem) allows remote attackers to execute arbitrary SQL commands via the auction_id parameter, a different vector than CVE-2009-0106. | 2 | 7.5 | High | 2017-01-03 | 2009-05-16 | View | |
| 6650 | CVE-2008-6919 | profileedit.php TaskDriver 1.3 and earlier allows remote attackers to bypass authentication and gain administrative access by setting the auth cookie to "fook!admin." | 2 | 7.5 | High | 2017-01-03 | 2009-08-10 | View | |
| 72442 | CVE-2004-2065 | DansGuardian 2.8 and earlier allows remote attackers to bypass the extension filtering rule via a hex encoded extension or . in the filename. | 2 | 7.5 | High | 2017-07-18 | 2017-07-10 | View | |
| 73210 | CVE-2003-0063 | The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user"s terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands. | 2 | 7.5 | High | 2017-01-03 | 2016-10-17 | View | |
| 73722 | CVE-2003-0605 | The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function. | 2 | 7.5 | High | 2017-01-03 | 2016-10-17 | View |
Page 15668 of 17672, showing 5 records out of 88360 total, starting on record 78336, ending on 78340
