| Max CVSS | 7.5 | Min CVSS | 3.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-6367 | 5.7 |
The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifications of the TMICT value.
|
13-02-2023 - 04:49 | 14-12-2013 - 18:08 | |
| CVE-2012-2088 | 7.5 |
Integer signedness error in the TIFFReadDirectory function in tif_dirread.c in libtiff 3.9.4 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a negative tile depth in a tiff
|
13-02-2023 - 04:33 | 22-07-2012 - 17:55 | |
| CVE-2007-2991 | 4.3 |
Cross-site scripting (XSS) vulnerability in includes/send.inc.php in Evenzia CMS allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
|
16-10-2018 - 16:46 | 04-06-2007 - 16:30 | |
| CVE-2018-11326 | 3.5 |
An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the default filtering settings could potentially allow users of the default Administrator user group to perform a
|
22-06-2018 - 16:16 | 22-05-2018 - 15:29 | |
| CVE-2005-1530 | 5.0 |
Sophos Anti-Virus 5.0.1, with "Scan inside archive files" enabled, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a Bzip2 archive with a large 'Extra field length' value.
|
11-07-2017 - 01:32 | 19-07-2005 - 04:00 | |
| CVE-2015-3367 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the Patterns module before 7.x-2.2 for Drupal allow remote attackers to hijack the authentication of administrators for requests that (1) restore, (2) publish, or (3) unpublish a pattern v
|
06-12-2016 - 03:00 | 21-04-2015 - 16:59 | |
| CVE-2016-0830 | 3.3 |
btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of configuration entries, and consequently exceeding the max
|
28-11-2016 - 19:55 | 12-03-2016 - 21:59 | |
| CVE-2002-0439 | 7.5 |
Cross-site scripting vulnerability in CaupoShop 1.30a and earlier, and possibly CaupoShopPro, allows remote attackers to execute arbitrary Javascript and steal credit card numbers or delete items by injecting the script into new customer information
|
05-09-2008 - 20:28 | 26-07-2002 - 04:00 |