CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 11 Last 7 days 2,779 Total CVEs 401,141 CISA KEV 1,731 Critical 42,394 All stats

Filters: Vendor: Open Source Development Network Clear all

Page 1

CVE-2004-2656 MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote att…

CVSS 4.3 EPSS 1.44% Apr 13, 2006

CVE-2001-1535 MEDIUM

Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized…

CVSS 4.6 EPSS 0.35% Jul 14, 2005

CVE-2002-1748 HIGH

Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.

CVSS 7.2 EPSS 0.78% Jun 21, 2005

CVE-2002-1681 MEDIUM

Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other use…

CVSS 6.8 EPSS 1.34% Jun 21, 2005

CVE-2002-0292 LOW

Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication infor…

CVSS 2.6 EPSS 1.34% Apr 2, 2003

CVE-2000-1015 HIGH

The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileg…

CVSS 7.5 EPSS 2.17% Nov 29, 2000

CVE ID	Description	Severity	CVSS	EPSS	Published
CVE-2004-2656	Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote att…	MEDIUM	4.3	1.44%	Apr 13, 2006
CVE-2001-1535	Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized…	MEDIUM	4.6	0.35%	Jul 14, 2005
CVE-2002-1748	Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.	HIGH	7.2	0.78%	Jun 21, 2005
CVE-2002-1681	Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other use…	MEDIUM	6.8	1.34%	Jun 21, 2005
CVE-2002-0292	Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication infor…	LOW	2.6	1.34%	Apr 2, 2003
CVE-2000-1015	The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileg…	HIGH	7.5	2.17%	Nov 29, 2000

Rows per page

Showing 1 to 6 CVEs · page 1