{"resultsPerPage":10,"startIndex":0,"totalResults":226,"format":"NVD_CVE","version":"2.0","timestamp":"2026-07-21T02:11:01.324","vulnerabilities":[{"cve":{"id":"CVE-2002-1841","sourceIdentifier":"cve@mitre.org","published":"2002-12-31T05:00:00.000","lastModified":"2026-06-16T22:00:09.400","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-434"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:noguska:nola:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"BE434C5B-9280-4B51-9A65-BAD2AF3759BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:noguska:nola:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"19990936-0711-4E89-A169-EA039000E313"}]}]}],"references":[{"url":"http://marc.info/?l=vuln-dev&m=102511114021370&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102520790718208&w=2","source":"cve@mitre.org","tags":["Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/archive/1/280340","source":"cve@mitre.org","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9438.php","source":"cve@mitre.org","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5116","source":"cve@mitre.org","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]},{"url":"http://marc.info/?l=vuln-dev&m=102511114021370&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=vuln-dev&m=102520790718208&w=2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"http://online.securityfocus.com/archive/1/280340","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/security_center/static/9438.php","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/bid/5116","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Broken Link","Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2005-3877","sourceIdentifier":"cve@mitre.org","published":"2005-11-29T11:03:00.000","lastModified":"2026-06-16T22:17:48.130","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the (1) folder_id parameter in list.php and (2) mid parameter in a view action to messages.php."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0-cvs","matchCriteriaId":"44B18220-4A6F-4F92-8D4F-2023721AFAF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"15D97881-809C-4BAB-B0A1-98C748696DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"324EE37A-6BC9-4143-B0D4-EE91CAA3E58D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.6:*:*:*:*:*:*:*","matchCriteriaId":"5B408CEF-73A4-45FB-BACD-E5733C78B676"}]}]}],"references":[{"url":"http://pridels0.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17746","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/21374","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/21375","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15596","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2005/2614","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://pridels0.blogspot.com/2005/11/sdms-20-sql-inj-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17746","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/21374","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/21375","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15596","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/2614","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}},{"cve":{"id":"CVE-2006-3946","sourceIdentifier":"cve@mitre.org","published":"2006-07-31T23:04:00.000","lastModified":"2026-06-16T22:28:08.043","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a \"memory management error\" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag."},{"lang":"es","value":"WebCore en Apple Mac OS X 10.3.9 y 10.4 hasta 10.4.7 permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente ejecutar código de su elección mediante HTML artesanal que provoca un \"error de gestión de memoria\" en WebKit, posiblemente debido a un desbordamiento de buffer, como fue originalmente reportado para la función KHTMLParser::popOneBlock en Apple Safari 2.0.4 usando Javascript que cambia document.body.innerHTML dentro de una etiqueta DIV."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:safari:2.0.4:*:*:*:*:*:*:*","matchCriteriaId":"DFDCF83E-620C-40FA-9901-5D939E315143"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.3.9:*:*:*:*:*:*:*","matchCriteriaId":"DC6931D5-DE7E-41F6-ADDC-AB5A8A167F69"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*","matchCriteriaId":"0760FDDB-38D3-4263-9B4D-1AF5E613A4F9"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*","matchCriteriaId":"AFD4DE58-46C7-4E69-BF36-C5FD768B8248"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*","matchCriteriaId":"CF824694-52DE-44E3-ACAD-60B2A84CD3CE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*","matchCriteriaId":"B73A0891-A37A-4E0D-AA73-B18BFD6B1447"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*","matchCriteriaId":"26AC38AB-D689-4B2B-9DAE-F03F4DFD15BE"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*","matchCriteriaId":"0C580935-0091-4163-B747-750FB7686973"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*","matchCriteriaId":"BB0F2132-8431-4CEF-9A3D-A69425E3834E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*","matchCriteriaId":"8719F3C4-F1DE-49B5-9301-22414A2B6F9C"}]}]}],"references":[{"url":"http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/21271","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22187","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016957","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/27534","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/19250","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2006/3069","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3852","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28081","source":"cve@mitre.org"},{"url":"http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/21271","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"]},{"url":"http://secunia.com/advisories/22187","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016957","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/27534","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19250","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2006/3069","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/3852","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/28081","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-6717","sourceIdentifier":"cve@mitre.org","published":"2006-12-23T11:28:00.000","lastModified":"2026-06-16T22:33:39.433","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations."},{"lang":"es","value":"EL switch Allied Telesis AT-9000/24 Ethernet acepta paquetes de gestión de VLANs arbitrarias, al contrario que en la documentación, lo cual permite a un atacante remoto realizar ataques contra el switch desde localizaciones inesperadas."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:alliedtelesyn:at-9000_24_ethernetswitch:*:*:*:*:*:*:*:*","matchCriteriaId":"C6E90523-DF9C-465E-83ED-BA963449DA29"}]}]}],"references":[{"url":"http://secunia.com/advisories/23451","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23590","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/454630/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/21628","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30924","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/23451","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/23590","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/454630/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/21628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30924","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2007-2849","sourceIdentifier":"cve@mitre.org","published":"2007-05-24T18:30:00.000","lastModified":"2026-06-16T22:40:33.323","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check."},{"lang":"es","value":"El Administrador de Documentos KnowledgeTree (también conocido como KnowledgeTree Open Source) anterior al STABLE 3.3.7 no requiere contraseña para usuarios no registrados, cuando el usuario existe en el Active Directory, lo que permite a atacantes remotos validarse en el KTDMS sin tener un control de autorización intencionado."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:knowledgetree_document_management:knowledgetree_document_management:3.3.3:*:*:*:*:*:*:*","matchCriteriaId":"4EFCB854-7EDE-4D1C-B5F5-8C6EE6DAFE89"}]}]}],"references":[{"url":"http://osvdb.org/36578","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/25360","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=698243","source":"cve@mitre.org"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=510338","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/24110","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2007/1920","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34463","source":"cve@mitre.org"},{"url":"http://osvdb.org/36578","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/25360","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://sourceforge.net/forum/forum.php?forum_id=698243","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://sourceforge.net/project/shownotes.php?release_id=510338","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/24110","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2007/1920","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/34463","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-3730","sourceIdentifier":"cve@mitre.org","published":"2008-08-20T16:41:00.000","lastModified":"2026-06-16T22:56:24.033","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Nordicwind Document Management System (NOAH) before 3.2.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."},{"lang":"es","value":"Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Nordicwind Document Management System (NOAH) anterior a 3.2.2, permite a atacantes remotos inyectar secuencias de comandos Web o HTML de su elección a través de vectores no especificados."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.1","matchCriteriaId":"E2F1CBC7-E6C8-4362-910C-F0241ECB0B10"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"85B722F8-86E7-4167-A0F6-4C47D031D3D1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.0b:*:*:*:*:*:*:*","matchCriteriaId":"069E8791-CB9B-4561-9A44-E6436FCC7455"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"C969E818-F310-48A4-BCE5-D25D80DF6EA6"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"83E0EE8C-3A85-46F6-B514-0D17B18E87D4"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"DB68C485-CD65-4A7D-8870-786F344DA198"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"3BFBB5C0-6C00-4134-BD70-C4096F29FF66"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"5DAFCB7F-B5DE-45B1-9A68-9DC76B799923"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A36D93C3-3A99-4C65-B8CD-9D6289118988"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"179BA060-71CA-4093-ABEF-9F99DA44D2A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"94193B07-3D89-47EB-92D0-60570DC13BA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"DE44810A-703F-4432-8261-A95AA6CBAA03"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"2767D0D4-11B8-4847-B6F6-038881455714"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"77AB71B7-8295-4580-846F-A59159EAAC59"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"F4F5D2C4-E4AD-4F04-99B0-4ABC8F992ADE"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"205EAB96-D71E-47FA-A194-3D97B99CA0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:noah:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4A9DFEF4-A828-4B22-A903-08111A4C99D3"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:*:*:*:*:*:*:*:*","versionEndIncluding":"3.2.1","matchCriteriaId":"EC455378-BDCC-4602-86B6-D6687AE66C1B"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.0:*:*:*:*:*:*:*","matchCriteriaId":"2539F691-6B92-40A6-B26C-AA059CF825C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.0b:*:*:*:*:*:*:*","matchCriteriaId":"DB57C4CD-359B-49ED-9E89-27088694F030"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"CFF058FC-90D8-4E08-BAEA-E7635CBD3582"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.2:*:*:*:*:*:*:*","matchCriteriaId":"E95E72B6-E43E-4707-8F04-29476A11B520"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.3:*:*:*:*:*:*:*","matchCriteriaId":"4F7C9417-BFF5-41DE-B328-A1F2E8375B83"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.4:*:*:*:*:*:*:*","matchCriteriaId":"DBF67F28-92D9-4689-B25E-343BA927397D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:1.5.5:*:*:*:*:*:*:*","matchCriteriaId":"233330E5-2DED-4CB1-9653-E5CFA5C7E364"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"920417C4-BA54-4182-ACFF-3C1EE743A5FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"8251B1F0-47B4-446E-9A13-C1EAF2CD74EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.3:*:*:*:*:*:*:*","matchCriteriaId":"22DEA5BE-1102-4729-9E1F-6E5B39CC1BE7"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.4:*:*:*:*:*:*:*","matchCriteriaId":"A39C66C3-3267-4875-9040-CA7AC04F7874"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.5:*:*:*:*:*:*:*","matchCriteriaId":"AB6B9D61-C8AA-4F36-9769-374CED49C83D"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.1.6:*:*:*:*:*:*:*","matchCriteriaId":"43A85963-8CBC-4AC9-8F8A-C5D9F7FF3816"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:2.2.1:*:*:*:*:*:*:*","matchCriteriaId":"5E4B95AA-F5FC-4B93-B517-144D376C0822"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"20CB2E5F-B247-4531-BCA4-E9A4B52DABA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:nordicwind:nordicwind_document_management_system:3.1.3:*:*:*:*:*:*:*","matchCriteriaId":"61C42D81-7E18-47BF-9E03-AB402AF20F6F"}]}]}],"references":[{"url":"http://osvdb.org/47558","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/31543","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.nordicwind.ca/noah/bugs/inputval.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/30747","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44535","source":"cve@mitre.org"},{"url":"http://osvdb.org/47558","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/31543","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.nordicwind.ca/noah/bugs/inputval.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/30747","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44535","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6220","sourceIdentifier":"cve@mitre.org","published":"2009-02-20T21:30:00.390","lastModified":"2026-06-16T23:01:50.313","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en login.php en Simple Document Management System (SDMS) v1.1.5 and v1.1.4, y posiblemente anteriores, lo que permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"pass\"."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"15D97881-809C-4BAB-B0A1-98C748696DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"324EE37A-6BC9-4143-B0D4-EE91CAA3E58D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/6987","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/6987","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-6236","sourceIdentifier":"cve@mitre.org","published":"2009-02-21T23:30:00.280","lastModified":"2026-06-16T23:01:52.090","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information."},{"lang":"es","value":"Una vulnerabilidad de inyección SQL en login.php de Simple Document Management System (SDMS) v1.1.5 y v1.1.4, y posiblemente anteriores, lo que permite a atacantes remotos ejecutar comandos SQL a su eleccion a traves del parametro \"login\". NOTA; La procedencia de esta informacion es desconocido; los detalles fueron obtenidos unicamente por una tercera parte."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.4:*:*:*:*:*:*:*","matchCriteriaId":"15D97881-809C-4BAB-B0A1-98C748696DBF"},{"vulnerable":true,"criteria":"cpe:2.3:a:cafuego:simple_document_management_system:1.1.5:*:*:*:*:*:*:*","matchCriteriaId":"324EE37A-6BC9-4143-B0D4-EE91CAA3E58D"}]}]}],"references":[{"url":"http://secunia.com/advisories/32502","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48944","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/32502","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/32114","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/46342","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/48944","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1503","sourceIdentifier":"cve@mitre.org","published":"2009-05-01T17:30:00.467","lastModified":"2026-06-16T23:07:24.437","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en login.php en Tiger Document Management System (DMS) permiten a atacantes remotos ejecutar comandos SQL a través de los parámetros (1) username  (2) password."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-89"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tigerdms:tigerdms:*:*:*:*:*:*:*:*","matchCriteriaId":"DABD8C80-E1E1-4181-B6A7-C7B9699CCCA9"}]}]}],"references":[{"url":"http://secunia.com/advisories/34784","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34775","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/8571","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34784","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/34775","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/8571","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2008-7231","sourceIdentifier":"cve@mitre.org","published":"2009-09-14T14:30:00.467","lastModified":"2026-06-16T23:03:52.700","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in Meridio Document and Records Management before 4.3 SR1 allows remote authenticated users to inject arbitrary web script or HTML via the Title field in a (1) document (subGeneralProps:dmpvDocTitle:PROP_W_title) or (2) container (subGeneralProps:dmpvContainerTitle:PROP_W_title)."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Meridio Document y Records Management anterior a v4.3 SR1, permite a usuarios autenticados inyectar secuencias de comandos web o HTML de su elección a través del campo Title en un (1) documento (subGeneralProps:dmpvDocTitle:PROP_W_title) o (2) contenedor(subGeneralProps:dmpvContainerTitle:PROP_W_title)."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","baseScore":3.5,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-79"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:meridio:document_and_records_management:*:*:*:*:*:*:*:*","versionEndIncluding":"4.3","matchCriteriaId":"2B8F8639-75DB-4323-A663-29D1D7FF953E"},{"vulnerable":true,"criteria":"cpe:2.3:a:meridio:document_and_records_management:4.2:*:*:*:*:*:*:*","matchCriteriaId":"5CFE434C-05A5-41D8-8B7F-F5147FD5F2C3"}]}]}],"references":[{"url":"http://labs.mwrinfosecurity.com/advisories/meridio_cross_site_scripting_vulnerability/","source":"cve@mitre.org"},{"url":"http://labs.mwrinfosecurity.com/files/Advisories/mwri_meridio-advisory-embedded-xss_2008-01-15.pdf","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/27721","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40422","source":"cve@mitre.org"},{"url":"http://labs.mwrinfosecurity.com/advisories/meridio_cross_site_scripting_vulnerability/","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://labs.mwrinfosecurity.com/files/Advisories/mwri_meridio-advisory-embedded-xss_2008-01-15.pdf","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/27721","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/40422","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}