| Max CVSS | 7.8 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-5015 | 7.2 |
A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local a
|
13-06-2022 - 18:55 | 08-03-2019 - 20:29 | |
| CVE-2019-9741 | 4.3 |
An issue was discovered in net/http in Go 1.11.5. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the second argument to http.NewRequest with \r\n followed by an HTTP header or a Redis command.
|
22-03-2021 - 13:05 | 13-03-2019 - 08:29 | |
| CVE-2019-3780 | 6.5 |
Cloud Foundry Container Runtime, versions prior to 0.28.0, deploys K8s worker nodes that contains a configuration file with IAAS credentials. A malicious user with access to the k8s nodes can obtain IAAS credentials allowing the user to escalate priv
|
19-10-2020 - 17:56 | 08-03-2019 - 16:29 | |
| CVE-2018-1916 | 3.5 |
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent
|
09-10-2019 - 23:39 | 14-03-2019 - 22:29 | |
| CVE-2018-1908 | 3.5 |
IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent
|
09-10-2019 - 23:39 | 14-03-2019 - 22:29 | |
| CVE-2018-1952 | 3.5 |
IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent
|
09-10-2019 - 23:39 | 14-03-2019 - 22:29 | |
| CVE-2018-1825 | 3.5 |
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
09-10-2019 - 23:39 | 14-03-2019 - 22:29 | |
| CVE-2018-1823 | 3.5 |
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
09-10-2019 - 23:39 | 14-03-2019 - 22:29 | |
| CVE-2018-1829 | 3.5 |
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
09-10-2019 - 23:39 | 14-03-2019 - 22:29 | |
| CVE-2018-1824 | 3.5 |
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
09-10-2019 - 23:39 | 14-03-2019 - 22:29 | |
| CVE-2018-1688 | 3.5 |
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality p
|
09-10-2019 - 23:38 | 14-03-2019 - 22:29 | |
| CVE-2018-1658 | 3.5 |
IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker co
|
03-10-2019 - 00:03 | 14-03-2019 - 22:29 | |
| CVE-2018-11789 | 7.8 |
When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any file on the host. Example woule be modifying the parameter path= to go to the directory you would like to view. i.e. ..%2F..%2F..%2F.
|
25-03-2019 - 18:10 | 21-03-2019 - 16:00 | |
| CVE-2019-6149 | 7.2 |
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
|
21-03-2019 - 16:01 | 18-03-2019 - 01:32 | |
| CVE-2018-1759 | 3.5 |
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
21-03-2019 - 16:00 | 14-03-2019 - 22:29 | |
| CVE-2018-1763 | 3.5 |
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
21-03-2019 - 16:00 | 14-03-2019 - 22:29 | |
| CVE-2018-1764 | 3.5 |
IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos
|
21-03-2019 - 16:00 | 14-03-2019 - 22:29 | |
| CVE-2004-0735 | 7.5 |
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors
|
11-07-2017 - 01:30 | 27-07-2004 - 04:00 |