| Max CVSS | 7.5 | Min CVSS | 4.7 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-19964 | 4.9 |
An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain error conditions.
|
24-08-2020 - 17:37 | 08-12-2018 - 04:29 | |
| CVE-2017-5936 | 5.0 |
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
|
03-10-2019 - 00:03 | 12-04-2017 - 22:59 | |
| CVE-2018-19963 | 6.9 |
An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled.
|
03-10-2019 - 00:03 | 08-12-2018 - 04:29 | |
| CVE-2018-19965 | 4.7 |
An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of
|
03-10-2019 - 00:03 | 08-12-2018 - 04:29 | |
| CVE-2018-19962 | 6.9 |
An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.
|
03-10-2019 - 00:03 | 08-12-2018 - 04:29 | |
| CVE-2018-19966 | 7.2 |
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow pagi
|
03-10-2019 - 00:03 | 08-12-2018 - 04:29 | |
| CVE-2018-19961 | 6.9 |
An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.
|
03-10-2019 - 00:03 | 08-12-2018 - 04:29 | |
| CVE-2018-19967 | 4.9 |
An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service (host OS hang) because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE ins
|
17-04-2019 - 21:29 | 08-12-2018 - 04:29 | |
| CVE-2007-5737 | 7.5 |
Unrestricted file upload vulnerability in component/upload.jsp in Korean GHBoard allows remote attackers to upload arbitrary files via unspecified vectors, probably involving a direct request.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5739 | 5.0 |
Directory traversal vulnerability in component/flashupload/download.jsp in the FlashUpload component in Korean GHBoard allows remote attackers to read arbitrary files via a .. (dot dot) in the name parameter.
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2007-5738 | 6.8 |
The FlashUpload component in Korean GHBoard uses a client-side protection mechanism to prevent uploading of dangerous file extensions, which allows remote attackers to bypass restrictions and upload arbitrary files via a modified copy of component/fl
|
15-10-2018 - 21:46 | 30-10-2007 - 23:46 | |
| CVE-2009-3115 | 5.0 |
SolarWinds TFTP Server 9.2.0.111 and earlier allows remote attackers to cause a denial of service (service stop) via a crafted Option Acknowledgement (OACK) request. NOTE: some of these details are obtained from third party information.
|
19-09-2017 - 01:29 | 09-09-2009 - 22:30 | |
| CVE-2002-1281 | 7.5 |
Unknown vulnerability in the rlogin KIO subsystem (rlogin.protocol) of KDE 2.x 2.1 and later, and KDE 3.x 3.0.4 and earlier, allows local and remote attackers to execute arbitrary code via a certain URL.
|
18-10-2016 - 02:25 | 29-11-2002 - 05:00 | |
| CVE-2002-1282 | 7.5 |
Unknown vulnerability in the telnet KIO subsystem (telnet.protocol) of KDE 2.x 2.1 and later allows local and remote attackers to execute arbitrary code via a certain URL.
|
18-10-2016 - 02:25 | 29-11-2002 - 05:00 | |
| CVE-2006-0157 | 5.0 |
settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password st
|
05-09-2008 - 20:58 | 10-01-2006 - 11:03 |