| Max CVSS | 9.3 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2009-3551 | 5.0 |
Off-by-one error in the dissect_negprot_response function in packet-smb.c in the SMB dissector in Wireshark 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.
|
13-02-2023 - 02:20 | 30-10-2009 - 20:30 | |
| CVE-2009-3550 | 4.3 |
The DCERPC/NT dissector in Wireshark 0.10.10 through 1.0.9 and 1.2.0 through 1.2.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a file that records a malformed packet trace. NOTE: some of t
|
13-02-2023 - 02:20 | 30-10-2009 - 20:30 | |
| CVE-2014-3474 | 3.5 |
Cross-site scripting (XSS) vulnerability in horizon/static/horizon/js/horizon.instances.js in the Launch Instance menu in OpenStack Dashboard (Horizon) before 2013.2.4, 2014.1 before 2014.1.2, and Juno before Juno-2 allows remote authenticated users
|
13-02-2023 - 00:39 | 31-10-2014 - 15:55 | |
| CVE-2014-2438 | 3.5 |
Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.
|
16-09-2022 - 19:57 | 16-04-2014 - 02:55 | |
| CVE-2018-6271 | 9.3 |
NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software delivers extra data with the buffer and does not properly validated the extra data, which may lead to denial of service or escalation of privileges. Android ID: A-8
|
03-10-2019 - 00:03 | 13-02-2019 - 22:29 | |
| CVE-2018-6267 | 9.3 |
NVIDIA Tegra OpenMax driver (libnvomx) contains a vulnerability in which the software does not validate or incorrectly validates input that can affect the control flow or data flow of a program, which may lead to denial of service or escalation of pr
|
03-10-2019 - 00:03 | 13-02-2019 - 22:29 | |
| CVE-2018-6268 | 9.3 |
NVIDIA Tegra library contains a vulnerability in libnvmmlite_video.so, where referencing memory after it has been freed may lead to denial of service or possible escalation of privileges. Android ID: A-80433161.
|
02-04-2019 - 18:30 | 13-02-2019 - 22:29 | |
| CVE-2014-4331 | 4.3 |
Cross-site scripting (XSS) vulnerability in admin/viewer.php in OctavoCMS allows remote attackers to inject arbitrary web script or HTML via the src parameter.
|
09-10-2018 - 19:49 | 19-07-2014 - 20:55 | |
| CVE-2009-2560 | 5.0 |
Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP diss
|
19-09-2017 - 01:29 | 21-07-2009 - 17:30 | |
| CVE-2009-3549 | 5.0 |
packet-paltalk.c in the Paltalk dissector in Wireshark 1.2.0 through 1.2.2, on SPARC and certain other platforms, allows remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace.
|
19-09-2017 - 01:29 | 30-10-2009 - 20:30 | |
| CVE-2014-3313 | 4.3 |
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
|
29-08-2017 - 01:34 | 09-07-2014 - 11:07 | |
| CVE-2014-3952 | 4.9 |
FreeBSD 8.4 before p14, 9.1 before p17, 9.2 before p10, and 10.0 before p7 does not properly initialize the buffer between the header and data of a control message, which allows local users to obtain sensitive information from kernel memory via unspe
|
29-08-2017 - 01:34 | 15-07-2014 - 14:55 | |
| CVE-2014-3309 | 5.0 |
The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka B
|
29-08-2017 - 01:34 | 09-07-2014 - 11:07 | |
| CVE-2014-3312 | 6.9 |
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct ac
|
29-08-2017 - 01:34 | 09-07-2014 - 11:07 | |
| CVE-2016-10135 | 4.3 |
An issue was discovered on LG devices using the MTK chipset with L(5.0/5.1), M(6.0/6.0.1), and N(7.0) software, and RCA Voyager Tablet, BLU Advance 5.0, and BLU R1 HD devices. The MTKLogger app with a package name of com.mediatek.mtklogger has applic
|
16-03-2017 - 01:59 | 13-01-2017 - 09:59 | |
| CVE-2002-0842 | 7.5 |
Format string vulnerability in certain third party modifications to mod_dav for logging bad gateway messages (e.g. Oracle9i Application Server 9.0.2) allows remote attackers to execute arbitrary code via a destination URI that forces a "502 Bad Gatew
|
18-10-2016 - 02:22 | 03-03-2003 - 05:00 | |
| CVE-2012-4348 | 7.2 |
The management console in Symantec Endpoint Protection (SEP) 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote
|
14-03-2013 - 03:10 | 18-12-2012 - 20:55 |