Export limit exceeded: 92135 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (92135 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2011-1135 | 1 S9y | 1 Serendipity | 2024-11-21 | 6.1 Medium |
| Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php. | ||||
| CVE-2011-1133 | 1 S9y | 1 Serendipity | 2024-11-21 | 6.1 Medium |
| Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php. | ||||
| CVE-2011-1086 | 1 Openfiler | 1 Openfiler | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device parameter. | ||||
| CVE-2011-1084 | 1 Smoothwall | 1 Smoothwall Express | 2024-11-21 | 6.1 Medium |
| A cross-site scripting (XSS) vulnerability in Smoothwall Express 3. | ||||
| CVE-2011-1069 | 1 Phpshop | 1 Phpshop | 2024-11-21 | 6.1 Medium |
| PHPShop through 0.8.1 has XSS. | ||||
| CVE-2011-1009 | 1 Vanillaforums | 1 Vanilla | 2024-11-21 | 6.1 Medium |
| Vanilla Forums 2.0.17.1 through 2.0.17.5 has XSS in /vanilla/index.php via the p parameter. | ||||
| CVE-2011-0699 | 1 Linux | 1 Linux Kernel | 2024-11-21 | 7.0 High |
| Integer signedness error in the btrfs_ioctl_space_info function in the Linux kernel 2.6.37 allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted slot value. | ||||
| CVE-2011-0544 | 2 Debian, Phpbb | 2 Debian Linux, Phpbb | 2024-11-21 | 6.1 Medium |
| phpbb 3.0.x-3.0.6 has an XSS vulnerability via the [flash] BB tag. | ||||
| CVE-2011-0428 | 1 Ikiwiki | 1 Ikiwiki | 2024-11-21 | 6.1 Medium |
| Cross Site Scripting (XSS) in ikiwiki before 3.20110122 could allow remote attackers to insert arbitrary JavaScript due to insufficient checking in comments. | ||||
| CVE-2010-5340 | 1 Icewarp | 1 Webclient | 2024-11-21 | 6.1 Medium |
| IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0. | ||||
| CVE-2010-5339 | 1 Icewarp | 1 Webclient | 2024-11-21 | 6.1 Medium |
| IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0. | ||||
| CVE-2010-5338 | 1 Icewarp | 1 Webclient | 2024-11-21 | 6.1 Medium |
| IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0. | ||||
| CVE-2010-5337 | 1 Icewarp | 1 Webclient | 2024-11-21 | 6.1 Medium |
| IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0. | ||||
| CVE-2010-5336 | 1 Icewarp | 1 Webclient | 2024-11-21 | 6.1 Medium |
| IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0. | ||||
| CVE-2010-4662 | 1 Pmwiki | 1 Pmwiki | 2024-11-21 | 6.1 Medium |
| PmWiki before 2.2.21 has XSS. | ||||
| CVE-2010-4659 | 1 Status | 1 Statusnet | 2024-11-21 | 6.1 Medium |
| Cross-site scripting (XSS) vulnerability in statusnet through 2010 in error message contents. | ||||
| CVE-2010-4658 | 1 Status | 1 Statusnet | 2024-11-21 | 5.3 Medium |
| statusnet through 2010 allows attackers to spoof syslog messages via newline injection attacks. | ||||
| CVE-2010-4657 | 3 Debian, Php, Redhat | 3 Debian Linux, Php, Enterprise Linux | 2024-11-21 | 7.5 High |
| PHP5 before 5.4.4 allows passing invalid utf-8 strings via the xmlTextWriterWriteAttribute, which are then misparsed by libxml2. This results in memory leak into the resulting output. | ||||
| CVE-2010-4654 | 2 Debian, Freedesktop | 2 Debian Linux, Poppler | 2024-11-21 | 7.8 High |
| poppler before 0.16.3 has malformed commands that may cause corruption of the internal stack. | ||||
| CVE-2010-4264 | 1 Vanillaforums | 1 Vanilla Forums | 2024-11-21 | 6.1 Medium |
| It was found in vanilla forums before 2.0.10 a cross-site scripting vulnerability where a filename could contain arbitrary code to execute on the client side. | ||||