| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-2314 | 2.1 |
The bootloader configuration module (pyanaconda/bootloader.py) in Anaconda uses 755 permissions for /etc/grub.d, which allows local users to obtain password hashes and conduct brute force password guessing attacks.
|
16-01-2024 - 01:15 | 03-07-2012 - 22:55 | |
| CVE-2007-3105 | 4.6 |
Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup threshold to a value greater
|
13-02-2023 - 02:17 | 27-07-2007 - 21:30 | |
| CVE-2018-13412 | 7.2 |
An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent versi
|
21-04-2021 - 17:15 | 12-09-2018 - 16:29 | |
| CVE-2018-13411 | 9.0 |
An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window running as SYSTEM can be abused to escalate privileges. In cloud, the issue is fixed in 10.0.470 agent version.
|
21-04-2021 - 17:15 | 12-09-2018 - 16:29 | |
| CVE-2005-3550 | 5.0 |
Directory traversal vulnerability in admin.php in toendaCMS before 0.6.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the id_user parameter.
|
19-10-2018 - 15:37 | 16-11-2005 - 07:42 | |
| CVE-2014-1663 | 5.0 |
Unspecified vulnerability in Citrix XenMobile Device Manager server (formerly Zenprise Device Manager server) 8.5, 8.6, and MDM 8.0.1 allows remote attackers to obtain sensitive information via unknown vectors.
|
03-01-2018 - 02:29 | 06-02-2014 - 17:00 | |
| CVE-2010-3777 | 9.3 |
Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and Thunderbird 3.1.x before 3.1.7 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
|
19-09-2017 - 01:31 | 10-12-2010 - 19:00 | |
| CVE-2012-4263 | 4.3 |
Cross-site scripting (XSS) vulnerability in inc/admin/content.php in the Better WP Security (better_wp_security) plugin before 3.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP_USER_AGENT header.
|
29-08-2017 - 01:32 | 13-08-2012 - 22:55 | |
| CVE-2011-1390 | 7.5 |
SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2 allows remote attackers to execute arbitrary SQL commands by leveraging an error in the user-databas
|
17-08-2017 - 01:34 | 14-05-2012 - 22:55 | |
| CVE-2009-1714 | 4.3 |
Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML at
|
17-08-2017 - 01:30 | 10-06-2009 - 18:00 | |
| CVE-2012-0213 | 5.0 |
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and earlier allows remote attackers to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value
|
11-02-2017 - 02:59 | 07-08-2012 - 21:55 | |
| CVE-2017-2947 | 4.3 |
Adobe Acrobat Reader versions 15.020.20042 and earlier, 15.006.30244 and earlier, 11.0.18 and earlier have a security bypass vulnerability when manipulating Form Data Format (FDF).
|
18-01-2017 - 02:59 | 11-01-2017 - 04:59 | |
| CVE-2015-4210 | 4.3 |
Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur03806.
|
28-12-2016 - 17:52 | 23-06-2015 - 14:59 | |
| CVE-2012-1804 | 7.8 |
The OPC server in Progea Movicon before 11.3 allows remote attackers to cause a denial of service (out-of-bounds read and memory corruption) via a crafted HTTP request.
|
03-10-2013 - 18:30 | 14-05-2012 - 20:55 | |
| CVE-2002-1049 | 5.0 |
Format string vulnerability in HylaFAX faxgetty before 4.1.3 allows remote attackers to cause a denial of service (crash) via the TSI data element.
|
05-09-2008 - 20:29 | 04-10-2002 - 04:00 |