| Max CVSS | 7.2 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-4372 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Fuse Management Console in Red Hat JBoss Fuse 6.0.0 before patch 3 and JBoss A-MQ 6.0.0 before patch 3 allow remote attackers to inject arbitrary web script or HTML via the (1) user field in the
|
13-02-2023 - 04:46 | 30-09-2013 - 21:55 | |
| CVE-2017-2630 | 6.5 |
A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. The flaw could occur while processing server's response to a 'NBD_OPT_LIST' request. A malicious NBD server could
|
08-09-2021 - 13:15 | 27-07-2018 - 18:29 | |
| CVE-2011-0281 | 5.0 |
The unparse implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.6.x through 1.9, when an LDAP backend is used, allows remote attackers to cause a denial of service (file descriptor exhaustion and daemon hang) via a prin
|
21-01-2020 - 15:46 | 10-02-2011 - 18:00 | |
| CVE-2018-18065 | 4.0 |
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
|
16-10-2019 - 18:15 | 08-10-2018 - 18:29 | |
| CVE-2013-5498 | 5.0 |
The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet streams, aka Bug ID CSCue91963.
|
29-08-2017 - 01:33 | 27-09-2013 - 20:55 | |
| CVE-2007-5838 | 7.2 |
Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380.
|
29-07-2017 - 01:33 | 06-11-2007 - 19:46 | |
| CVE-2006-0246 | 4.3 |
Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
|
20-07-2017 - 01:29 | 18-01-2006 - 01:51 | |
| CVE-2002-1334 | 6.8 |
Cross-site scripting (XSS) vulnerability in BizDesign ImageFolio 3.01 and earlier allows remote attackers to execute arbitrary web script as other users via (1) the direct parameter in imageFolio.cgi, or (2) nph-build.cgi.
|
11-07-2017 - 01:29 | 11-12-2002 - 05:00 |