| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-18955 | 4.4 |
In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected u
|
24-08-2020 - 17:37 | 16-11-2018 - 20:29 | |
| CVE-2009-2764 | 5.0 |
Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no referenc
|
30-10-2018 - 16:27 | 14-08-2009 - 15:16 | |
| CVE-2011-0646 | 7.5 |
SQL injection vulnerability in viewfaqs.php in PHP LOW BIDS allows remote attackers to execute arbitrary SQL commands via the cat parameter.
|
17-08-2017 - 01:33 | 25-01-2011 - 19:00 | |
| CVE-2007-5207 | 3.3 |
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.
|
29-07-2017 - 01:33 | 04-10-2007 - 21:17 | |
| CVE-2017-3809 | 5.0 |
A vulnerability in the Policy deployment module of the Cisco Firepower Management Center (FMC) could allow an unauthenticated, remote attacker to prevent deployment of a complete and accurate rule base. More Information: CSCvb95281. Known Affected Re
|
25-07-2017 - 01:29 | 03-02-2017 - 07:59 | |
| CVE-2015-3244 | 4.9 |
The Portlet Bridge for JavaServer Faces in Red Hat JBoss Portal 6.2.0, when used in portlets with the default resource serving for GenericPortlet, does not properly restrict access to restricted resources, which allows remote attackers to obtain sens
|
28-11-2016 - 19:23 | 16-07-2015 - 11:00 | |
| CVE-2013-2006 | 2.1 |
OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by reading the log file.
|
05-05-2014 - 05:21 | 21-05-2013 - 18:55 | |
| CVE-2013-2025 | 4.3 |
Cross-site scripting (XSS) vulnerability in Ushahidi Platform 2.5.x through 2.6.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
25-04-2014 - 18:01 | 25-04-2014 - 17:12 | |
| CVE-2005-4386 | 4.3 |
Cross-site scripting (XSS) vulnerability in Colony CMS 2.75 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
|
06-08-2012 - 04:00 | 20-12-2005 - 02:03 | |
| CVE-2002-1528 | 5.0 |
MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.
|
05-09-2008 - 20:30 | 02-04-2003 - 05:00 |