| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-6487 | 4.3 |
Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (state, element, id, tab, cid) passed to the "EPESI-master/modules/Utils/RecordBrowser/favorit
|
04-01-2022 - 18:07 | 05-03-2017 - 20:59 | |
| CVE-2017-2290 | 9.0 |
On Windows installations of the mcollective-puppet-agent plugin, version 1.12.0, a non-administrator user can create an executable that will be executed with administrator privileges on the next "mco puppet" run. Puppet Enterprise users are not affec
|
09-09-2021 - 12:57 | 03-03-2017 - 15:59 | |
| CVE-2017-6478 | 4.3 |
paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
|
08-01-2021 - 13:54 | 05-03-2017 - 20:59 | |
| CVE-2017-6430 | 4.3 |
The compile_tree function in ef_compiler.c in the Etterfilter utility in Ettercap 0.8.2 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted filter.
|
26-02-2020 - 13:35 | 15-03-2017 - 15:59 | |
| CVE-2017-6445 | 7.6 |
The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remote
|
03-10-2019 - 00:03 | 05-03-2017 - 20:59 | |
| CVE-2017-10191 | 5.8 |
Vulnerability in the Oracle Web Analytics component of Oracle E-Business Suite (subcomponent: Common Libraries). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allo
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2017-5356 | 5.0 |
Irssi before 0.8.21 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a string containing a formatting sequence (%[) without a closing bracket (]).
|
15-03-2019 - 19:32 | 03-03-2017 - 15:59 | |
| CVE-2017-6501 | 4.3 |
An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference.
|
13-03-2019 - 13:48 | 06-03-2017 - 02:59 | |
| CVE-2004-0380 | 10.0 |
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM)
|
12-10-2018 - 21:34 | 04-05-2004 - 04:00 | |
| CVE-2008-2754 | 6.8 |
SQL injection vulnerability in toplists.php in eFiction 3.0 and 3.4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the list parameter.
|
29-09-2017 - 01:31 | 18-06-2008 - 22:41 | |
| CVE-2017-6351 | 9.3 |
The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / password. Once the device is set to DEBUG mode, an attacker can connect to the device using the telnet protocol and log into the device wi
|
01-09-2017 - 01:29 | 06-03-2017 - 02:59 | |
| CVE-2014-3037 | 6.0 |
Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager before 4.0.7 and 5.x before 5.0.1, Rational Software Architect Design Manager before 4.0.7 and 5.x bef
|
29-08-2017 - 01:34 | 10-09-2014 - 10:55 | |
| CVE-2017-6480 | 4.3 |
groovel/cmsgroovel before 3.3.7-beta is vulnerable to a reflected XSS in commons/browser.php (path parameter).
|
08-03-2017 - 02:59 | 05-03-2017 - 20:59 | |
| CVE-2017-6479 | 4.3 |
FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic parameter).
|
08-03-2017 - 02:59 | 05-03-2017 - 20:59 | |
| CVE-2010-0105 | 4.9 |
The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service (filesystem corruption)
|
10-12-2010 - 05:00 | 27-04-2010 - 15:30 | |
| CVE-2006-4366 | 7.5 |
PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third
|
05-09-2008 - 21:09 | 26-08-2006 - 21:04 |