| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-15275 | 5.0 |
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
|
29-08-2022 - 20:43 | 27-11-2017 - 22:29 | |
| CVE-2017-14746 | 7.5 |
Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute arbitrary code via a crafted SMB1 request.
|
16-08-2022 - 13:01 | 27-11-2017 - 22:29 | |
| CVE-2017-6168 | 4.3 |
On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server configured with a Client SSL profile may be vulnerable to an Adaptive Chosen Ciphertext attac
|
23-09-2021 - 15:58 | 17-11-2017 - 19:29 | |
| CVE-2017-5709 | 7.2 |
Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector.
|
03-10-2019 - 00:03 | 21-11-2017 - 14:29 | |
| CVE-2017-1628 | 4.0 |
IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect authorization checks.
|
03-10-2019 - 00:03 | 27-11-2017 - 21:29 | |
| CVE-2017-5706 | 7.2 |
Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code.
|
11-05-2018 - 01:29 | 21-11-2017 - 14:29 | |
| CVE-2017-1635 | 5.2 |
IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the applicat
|
27-12-2017 - 14:12 | 13-12-2017 - 18:29 | |
| CVE-2017-1650 | 3.5 |
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wit
|
07-12-2017 - 16:57 | 27-11-2017 - 21:29 | |
| CVE-2017-1689 | 3.5 |
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wit
|
07-12-2017 - 16:57 | 27-11-2017 - 21:29 | |
| CVE-2017-1688 | 3.5 |
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wit
|
07-12-2017 - 16:57 | 27-11-2017 - 21:29 | |
| CVE-2017-1607 | 3.5 |
IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wit
|
07-12-2017 - 16:57 | 27-11-2017 - 21:29 | |
| CVE-2017-15110 | 4.0 |
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and gu
|
06-12-2017 - 14:27 | 20-11-2017 - 14:29 | |
| CVE-2017-4934 | 7.2 |
VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host.
|
03-12-2017 - 17:36 | 17-11-2017 - 14:29 | |
| CVE-2017-4935 | 6.9 |
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Deni
|
03-12-2017 - 17:36 | 17-11-2017 - 14:29 | |
| CVE-2004-1955 | 7.5 |
SQL injection vulnerability in modules.php in phProfession 2.5 allows remote attackers to execute arbitrary SQL code via the offset parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2004-1954 | 4.3 |
Cross-site scripting (XSS) vulnerability in modules.php in phProfession 2.5 allows remote attackers to inject arbitrary web script or HTML via the jcode parameter.
|
11-07-2017 - 01:31 | 21-04-2004 - 04:00 | |
| CVE-2004-1953 | 5.0 |
phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 |