| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-3629 | 7.2 |
Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout") and write to arbitrary file on the host system via a symlink attack in an image when respawning a container.
|
02-02-2024 - 02:07 | 18-05-2015 - 15:59 | |
| CVE-2018-12361 | 6.8 |
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics computations when their inputs are not sanitized which results in a potentially exploitable crash. This vulnera
|
06-12-2018 - 14:38 | 18-10-2018 - 13:29 | |
| CVE-2010-4528 | 4.0 |
directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service (NULL pointer dereference and application crash) via a short p2pv2 packet in a DirectConnec
|
19-09-2017 - 01:31 | 07-01-2011 - 12:00 | |
| CVE-2012-1715 | 4.3 |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.
|
29-08-2017 - 01:31 | 17-07-2012 - 22:55 | |
| CVE-2010-4622 | 5.0 |
Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.
|
17-08-2017 - 01:33 | 30-12-2010 - 19:00 | |
| CVE-2016-0282 | 3.5 |
Cross-site scripting (XSS) vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS.
|
28-07-2017 - 01:29 | 24-11-2016 - 19:59 | |
| CVE-2010-4276 | 4.3 |
Cross-site scripting (XSS) vulnerability in the lz_tracking_set_sessid function in templates/jscript/jstrack.tpl in LiveZilla 3.2.0.2 allows remote attackers to inject arbitrary web script or HTML via the livezilla parameter in a track action to serv
|
11-01-2011 - 06:46 | 30-12-2010 - 19:00 | |
| CVE-2005-2644 | 7.5 |
Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.
|
05-09-2008 - 20:52 | 23-08-2005 - 04:00 | |
| CVE-2002-0607 | 7.5 |
members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.
|
05-09-2008 - 20:28 | 18-06-2002 - 04:00 |