| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-3776 | 3.5 |
Pivotal Operations Manager, 2.1.x versions prior to 2.1.20, 2.2.x versions prior to 2.2.16, 2.3.x versions prior to 2.3.10, 2.4.x versions prior to 2.4.3, contains a reflected cross site scripting vulnerability. A remote user that is able to convince
|
09-10-2019 - 23:49 | 07-03-2019 - 18:29 | |
| CVE-2017-0564 | 9.3 |
An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent dev
|
03-10-2019 - 00:03 | 07-04-2017 - 22:59 | |
| CVE-2015-2752 | 4.9 |
The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service (host CPU consumption) via a crafted request to the devi
|
30-10-2018 - 16:26 | 01-04-2015 - 14:59 | |
| CVE-2015-2751 | 7.1 |
Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations.
|
30-10-2018 - 16:26 | 01-04-2015 - 14:59 | |
| CVE-2006-1595 | 4.3 |
Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command. Successful exploitation requires that "
|
19-10-2017 - 01:29 | 03-04-2006 - 10:04 | |
| CVE-2015-5666 | 4.3 |
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.
|
06-10-2017 - 15:18 | 25-09-2017 - 21:29 | |
| CVE-2008-0065 | 10.0 |
Multiple stack-based buffer overflows in in_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a long (1) artist or (2) name tag in Ultravox streaming metadata, related to construction of stream titles.
|
08-08-2017 - 01:29 | 22-01-2008 - 20:00 | |
| CVE-2003-1543 | 4.3 |
Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.
|
08-08-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2013-7354 | 5.0 |
Multiple integer overflows in libpng before 1.5.14rc03 allow remote attackers to cause a denial of service (crash) via a crafted image to the (1) png_set_sPLT or (2) png_set_text_2 function, which triggers a heap-based buffer overflow.
|
31-12-2016 - 02:59 | 06-05-2014 - 14:55 |