| Max CVSS | 7.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-9274 | 4.4 |
Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected.
|
13-08-2020 - 19:37 | 11-11-2016 - 17:59 | |
| CVE-2017-1752 | 4.0 |
IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547.
|
28-06-2018 - 14:56 | 25-05-2018 - 14:29 | |
| CVE-2009-4798 | 7.5 |
Multiple SQL injection vulnerabilities in Diskos CMS 6.x allow remote attackers to execute arbitrary SQL commands via the (1) kat parameter to side.asp, and the (2) brugerid and (3) password fields to the administration login feature.
|
19-09-2017 - 01:30 | 22-04-2010 - 14:30 | |
| CVE-2013-7086 | 7.5 |
The message function in lib/webbynode/notify.rb in the Webbynode gem 1.0.5.3 and earlier for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message.
|
29-08-2017 - 01:34 | 19-12-2013 - 04:24 | |
| CVE-2015-0784 | 5.0 |
Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.
|
18-08-2017 - 12:55 | 09-08-2017 - 18:29 | |
| CVE-2007-3123 | 5.0 |
unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of service (core dump) via a crafted RAR file with a modified vm_codesize value, which triggers a heap-based buffer overflow.
|
29-07-2017 - 01:31 | 07-06-2007 - 21:30 | |
| CVE-2001-1371 | 7.5 |
The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by default via urn:soap-service-manager and urn:soap-provider-manager.
|
18-10-2016 - 02:14 | 06-02-2002 - 05:00 |