| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-4269 | 7.5 |
PHP remote file inclusion vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: th
|
17-05-2024 - 00:29 | 21-08-2006 - 21:04 | |
| CVE-2017-5667 | 2.1 |
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vecto
|
12-02-2023 - 23:29 | 16-03-2017 - 15:59 | |
| CVE-2016-6270 | 9.0 |
The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in Trend Micro Virtual Mobile Infrastructure before 5.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the password
|
13-09-2021 - 12:04 | 30-01-2017 - 22:59 | |
| CVE-2016-3402 | 5.0 |
Unspecified vulnerability in Zimbra Collaboration before 8.7.0 allows remote attackers to affect confidentiality via unknown vectors, aka bug 99167.
|
04-06-2020 - 12:10 | 18-01-2017 - 22:59 | |
| CVE-2016-3405 | 5.0 |
Multiple unspecified vulnerabilities in Zimbra Collaboration before 8.7.0 allow remote attackers to affect integrity via unknown vectors, aka bugs 103961 and 104828.
|
04-06-2020 - 12:10 | 18-01-2017 - 22:59 | |
| CVE-2017-5630 | 5.0 |
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess ove
|
23-01-2020 - 18:23 | 01-02-2017 - 23:59 | |
| CVE-2017-4896 | 2.1 |
Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application. Successful exploitation of this issue may result in an unauthorized disclosure of confidential data.
|
03-10-2019 - 00:03 | 10-05-2017 - 14:29 | |
| CVE-2008-1451 | 7.2 |
The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain privileges via a crafted packet, aka "Memory Overwrite Vulnerability."
|
30-10-2018 - 16:25 | 12-06-2008 - 02:32 | |
| CVE-2014-4084 | 9.3 |
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014
|
12-10-2018 - 22:07 | 10-09-2014 - 01:55 | |
| CVE-2016-10169 | 4.3 |
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
|
16-03-2018 - 01:29 | 14-03-2017 - 14:59 | |
| CVE-2016-2399 | 6.8 |
Integer overflow in the quicktime_read_pascal function in libquicktime 1.2.4 and earlier allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted hdlr MP4 atom.
|
04-11-2017 - 01:29 | 30-01-2017 - 22:59 | |
| CVE-2016-8944 | 4.9 |
IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. IBM APARs: IV91488, IV91487, IV91456, IV90234.
|
25-07-2017 - 01:29 | 15-02-2017 - 19:59 | |
| CVE-2004-2072 | 6.8 |
Cross-site scripting (XSS) vulnerability in index.php for Mambo Open Source 4.6, and possibly earlier versions, allows remote attackers to execute script on other clients via the Itemid parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
| CVE-2016-10172 | 4.3 |
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
|
14-03-2017 - 16:07 | 14-03-2017 - 14:59 | |
| CVE-2016-10171 | 4.3 |
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
|
14-03-2017 - 16:07 | 14-03-2017 - 14:59 | |
| CVE-2016-10170 | 4.3 |
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WV file.
|
14-03-2017 - 16:06 | 14-03-2017 - 14:59 | |
| CVE-2016-2087 | 6.8 |
Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
|
02-02-2017 - 02:59 | 18-01-2017 - 17:59 |