| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-6971 | 2.1 |
VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vmmsi.log file when an account other than the currently logged on user is specified during installation
|
03-10-2019 - 00:03 | 25-07-2018 - 13:29 | |
| CVE-2016-9896 | 6.8 |
Use-after-free while manipulating the "navigator" object within WebVR. Note: WebVR is not currently enabled by default. This vulnerability affects Firefox < 50.1.
|
25-06-2019 - 19:38 | 11-06-2018 - 21:29 | |
| CVE-2009-1907 | 4.3 |
Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
|
10-10-2018 - 19:39 | 04-06-2009 - 16:30 | |
| CVE-2016-9080 | 7.5 |
Memory safety bugs were reported in Firefox 50.0.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 50.1.
|
07-08-2018 - 16:52 | 11-06-2018 - 21:29 | |
| CVE-2016-9894 | 5.0 |
A buffer overflow in SkiaGl caused when a GrGLBuffer is truncated during allocation. Later writers will overflow the buffer, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 50.1.
|
01-08-2018 - 13:47 | 11-06-2018 - 21:29 | |
| CVE-2016-9903 | 4.3 |
Mozilla's add-ons SDK had a world-accessible resource with an HTML injection vulnerability. If an additional vulnerability allowed this resource to be loaded as a document it could allow injecting content and script into an add-on's context. This vul
|
01-08-2018 - 13:41 | 11-06-2018 - 21:29 | |
| CVE-2015-2070 | 7.5 |
SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via the catId parameter to cm/blogrss/feed.
|
30-11-2016 - 03:00 | 24-02-2015 - 17:59 | |
| CVE-2002-0904 | 7.5 |
SayText function in Kismet 2.2.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters (backtick or pipe) in the essid argument.
|
18-10-2016 - 02:22 | 04-10-2002 - 04:00 | |
| CVE-2014-0444 | 3.5 |
Unspecified vulnerability in the Oracle AutoVue Electro-Mechanical Professional component in Oracle Supply Chain Products Suite 20.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Web General, a different
|
07-02-2014 - 04:51 | 15-01-2014 - 16:08 |