229 matches found
CVE-2008-2590
Oracle’s CVE-2008-2590 affects Oracle Database 10.1.0.5 and Enterprise Manager 10.1.0.6 in the Instance Management component. The vulnerability is described as unspecified with unknown impact and requires a valid HTTP session, i.e., it is network-exposed but not openly exploit-able without authen...
CVE-2007-2590
The CVE-2007-2590 entry affects Nokia Intellisync Mobile Suite versions 6.4.31.2, 6.6.0.107, and 6.6.2.2, with possible involvement of Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express. Affected component/pages are the direct requests to usrmgr/userList.asp and usrmgr/us...
CVE-2006-2602
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-2590. Reason: This candidate is a duplicate of CVE-2006-2590. Notes: All CVE users should reference CVE-2006-2590 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
CVE-2006-2590
SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2006-2602
CVE-2006-2602 is rejected/not used; duplicate of CVE-2006-2590 and not an active vulnerability entry.
CVE-2004-2590
CVE-2004-2590 affects meindlSOFT Cute PHP Library (cphplib) version 0.46. The vulnerability is described as related to regular expressions with unspecified impact and attack vectors. NVD lists a high-severity network-exposed issue (CVSSv2 base score 10.0) with complete impact on confidentiality, ...
CVE-2005-2590
CVE-2005-2590 is a cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later. It allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NVD lists a CVSS2 base score of 4.3 (Medium) with network attack vector, no confidentiality impact, partial integr...