| Max CVSS | 10.0 | Min CVSS | 4.4 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-8170 | 4.4 |
An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers.
|
03-10-2019 - 00:03 | 09-05-2018 - 19:29 | |
| CVE-2010-2193 | 10.0 |
Multiple unspecified vulnerabilities in the CA (1) PSFormX and (2) WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors.
|
10-10-2018 - 19:59 | 10-06-2010 - 00:30 | |
| CVE-2016-9014 | 6.8 |
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate the HTTP Host header against settings.ALLOWED_HOS
|
04-11-2017 - 01:29 | 09-12-2016 - 20:59 | |
| CVE-2007-2777 | 7.5 |
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier allows remote attackers to execute arbitrary PHP code via an arbitrary .php filename in the zip parameter, which is created under spt
|
11-10-2017 - 01:32 | 21-05-2007 - 23:30 | |
| CVE-2007-2776 | 10.0 |
AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject a credential variable setting and obtain administrative access
|
11-10-2017 - 01:32 | 21-05-2007 - 23:30 | |
| CVE-2010-5013 | 7.5 |
SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter.
|
29-08-2017 - 01:29 | 02-11-2011 - 21:55 | |
| CVE-2010-1570 | 7.8 |
The computer telephony integration (CTI) server component in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), 6.0 before 6.0(1)SR1, and 5.0 before 5.0(2)SR3 allows remote attackers to cause a denial of service (CTI server
|
17-08-2017 - 01:32 | 10-06-2010 - 00:30 | |
| CVE-2010-1572 | 9.0 |
Unspecified vulnerability in the tech support diagnostic shell in Cisco Application Extension Platform (AXP) 1.1 and 1.1.5 allows local users to obtain sensitive configuration information and gain administrator privileges via unspecified API calls.
|
17-08-2017 - 01:32 | 10-06-2010 - 00:30 | |
| CVE-2010-1571 | 7.8 |
Directory traversal vulnerability in the bootstrap service in Cisco Unified Contact Center Express (UCCX) 7.0 before 7.0(1)SR4 and 7.0(2), unspecified 6.0 versions, and 5.0 before 5.0(2)SR3 allows remote attackers to read arbitrary files via a crafte
|
17-08-2017 - 01:32 | 10-06-2010 - 00:30 | |
| CVE-2002-0263 | 7.5 |
Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multipart Content-Type header to (1) ezboard.cgi, (2) ezman.cgi, or (3) ezadmin.cgi.
|
18-10-2016 - 02:17 | 29-05-2002 - 04:00 |