| Max CVSS | 7.8 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-5717 | 4.3 |
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the P_MUL dissector could crash. This was addressed in epan/dissectors/packet-p_mul.c by rejecting the invalid sequence number of zero.
|
20-03-2020 - 01:15 | 08-01-2019 - 23:29 | |
| CVE-2019-5716 | 4.3 |
In Wireshark 2.6.0 to 2.6.5, the 6LoWPAN dissector could crash. This was addressed in epan/dissectors/packet-6lowpan.c by avoiding use of a TVB before its creation.
|
20-03-2020 - 01:15 | 08-01-2019 - 23:29 | |
| CVE-2019-5718 | 4.3 |
In Wireshark 2.6.0 to 2.6.5 and 2.4.0 to 2.4.11, the RTSE dissector and other ASN.1 dissectors could crash. This was addressed in epan/charsets.c by adding a get_t61_string length check.
|
15-01-2020 - 20:15 | 08-01-2019 - 23:29 | |
| CVE-2018-7817 | 6.8 |
A Use After Free (CWE-416) vulnerability exists in Zelio Soft 2 v5.1 and prior versions which could cause remote code execution when opening a specially crafted Zelio Soft project file.
|
09-10-2019 - 23:42 | 06-02-2019 - 23:29 | |
| CVE-2018-1993 | 2.1 |
IBM Spectrum Scale (GPFS) 4.1.1, 4.2.0, 4.2.1, 4.2.2, 4.2.3, and 5.0.0 where the use of Local Read Only Cache (LROC) is enabled may caused read operation on a file to return data from a different file. IBM X-Force ID: 154440.
|
09-10-2019 - 23:39 | 08-01-2019 - 16:29 | |
| CVE-2018-1918 | 3.5 |
IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cr
|
09-10-2019 - 23:39 | 08-01-2019 - 16:29 | |
| CVE-2018-1932 | 4.0 |
IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could allow an authenticated user to obtain highly sensitive information. IBM X-Force ID: 153175.
|
09-10-2019 - 23:39 | 08-01-2019 - 16:29 | |
| CVE-2018-7836 | 7.5 |
An unrestricted Upload of File with Dangerous Type vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow upload and execution of malicious files.
|
06-02-2019 - 20:06 | 24-12-2018 - 16:29 | |
| CVE-2018-7837 | 5.0 |
An Improper Restriction of XML External Entity Reference ('XXE') vulnerability exists on numerous methods of the IIoT Monitor 3.1.38 software that could allow the software to resolve documents outside of the intended sphere of control, causing the so
|
01-02-2019 - 17:29 | 24-12-2018 - 16:29 | |
| CVE-2018-7835 | 7.8 |
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user.
|
01-02-2019 - 17:28 | 24-12-2018 - 16:29 | |
| CVE-2004-0673 | 6.8 |
Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message.
|
11-07-2017 - 01:30 | 06-08-2004 - 04:00 |