| Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-20216 | 5.0 |
QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).
|
12-05-2020 - 17:44 | 20-12-2018 - 21:29 | |
| CVE-2011-0447 | 6.8 |
Ruby on Rails 2.1.x, 2.2.x, and 2.3.x before 2.3.11, and 3.x before 3.0.4, does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attac
|
08-08-2019 - 15:41 | 14-02-2011 - 21:00 | |
| CVE-2011-0446 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the mail_to helper in Ruby on Rails before 2.3.11, and 3.x before 3.0.4, when javascript encoding is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) name or
|
08-08-2019 - 15:41 | 14-02-2011 - 21:00 | |
| CVE-2005-3921 | 2.6 |
Cross-site scripting (XSS) vulnerability in Cisco IOS Web Server for IOS 12.0(2a) allows remote attackers to inject arbitrary web script or HTML by (1) packets containing HTML that an administrator views via an HTTP interface to the contents of memor
|
19-10-2018 - 15:39 | 30-11-2005 - 11:03 | |
| CVE-2015-5125 | 10.0 |
Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before 18.0.0.199, and Adobe AIR SDK & Compiler before 18.0.0.199 allow attackers to cause a denial of service (vect
|
21-09-2017 - 01:29 | 14-08-2015 - 01:59 | |
| CVE-2002-2269 | 9.4 |
Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
|
29-07-2017 - 01:29 | 31-12-2002 - 05:00 | |
| CVE-2009-2139 | 9.3 |
Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a simi
|
19-07-2010 - 04:00 | 08-09-2009 - 23:30 | |
| CVE-2007-5816 | 5.0 |
dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an editauthor action, then reading the value of the newlocalpassword password input field in the HTML source of
|
15-11-2008 - 07:02 | 05-11-2007 - 18:46 |