| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-3881 | 2.1 |
arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
|
13-02-2023 - 04:27 | 23-12-2010 - 18:00 | |
| CVE-2018-8260 | 6.8 |
A Remote Code Execution vulnerability exists in .NET software when the software fails to check the source markup of a file, aka ".NET Framework Remote Code Execution Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 4.7.2.
|
23-05-2022 - 17:29 | 11-07-2018 - 00:29 | |
| CVE-2016-7276 | 5.8 |
Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via a crafted docum
|
12-10-2018 - 22:14 | 20-12-2016 - 06:59 | |
| CVE-2007-3461 | 7.5 |
SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
|
11-10-2017 - 01:32 | 27-06-2007 - 18:30 | |
| CVE-2011-0057 | 10.0 |
Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and gar
|
19-09-2017 - 01:31 | 02-03-2011 - 20:00 | |
| CVE-2011-0055 | 10.0 |
Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to t
|
19-09-2017 - 01:31 | 02-03-2011 - 20:00 | |
| CVE-2011-0058 | 10.0 |
Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a long string that triggers const
|
19-09-2017 - 01:31 | 02-03-2011 - 20:00 | |
| CVE-2014-1232 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
29-08-2017 - 01:34 | 08-01-2014 - 15:30 | |
| CVE-2005-1857 | 7.5 |
Format string vulnerability in simpleproxy before 3.4 allows remote malicious HTTP proxies to execute arbitrary code via format string specifiers in a reply.
|
11-07-2017 - 01:32 | 02-09-2005 - 22:03 | |
| CVE-2002-2086 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in magicHTML of SquirrelMail before 1.2.6 allow remote attackers to inject arbitrary web script or HTML via (1) "<<script" in unspecified input fields or (2) a javascript: URL in the src attribute o
|
11-07-2017 - 01:29 | 31-12-2002 - 05:00 | |
| CVE-2015-3988 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the metadata to a (1) Glance image, (2) Nova flavor or (3) Host Aggregate.
|
24-12-2016 - 02:59 | 19-05-2015 - 18:59 | |
| CVE-2009-1436 | 4.9 |
The db interface in libc in FreeBSD 6.3, 6.4, 7.0, 7.1, and 7.2-PRERELEASE does not properly initialize memory for Berkeley DB 1.85 database structures, which allows local users to obtain sensitive information by reading a database file.
|
28-11-2016 - 19:07 | 27-04-2009 - 18:00 |