| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-0141 | 7.6 |
A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitra
|
12-06-2023 - 07:15 | 17-03-2017 - 00:59 | |
| CVE-2011-1088 | 5.8 |
Apache Tomcat 7.x before 7.0.10 does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application.
|
13-02-2023 - 04:29 | 14-03-2011 - 19:55 | |
| CVE-2014-2430 | 3.5 |
Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to Performance Schema.
|
16-09-2022 - 19:57 | 16-04-2014 - 02:55 | |
| CVE-2014-2440 | 5.1 |
Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
|
04-08-2022 - 19:48 | 16-04-2014 - 02:55 | |
| CVE-2014-0429 | 10.0 |
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.
|
13-05-2022 - 14:57 | 16-04-2014 - 00:55 | |
| CVE-2018-17189 | 5.0 |
In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up that incoming data. This affects only HTTP/2 (mod_htt
|
06-07-2021 - 16:39 | 30-01-2019 - 22:29 | |
| CVE-2014-2400 | 4.3 |
Unspecified vulnerability in the Oracle Endeca Server component in Oracle Fusion Middleware 2.2.2 allows remote attackers to affect integrity via unknown vectors related to Oracle Endeca Information Discovery (Formerly Latitude), a different vulnerab
|
09-10-2018 - 19:43 | 16-04-2014 - 01:55 | |
| CVE-2012-5574 | 5.0 |
lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.
|
29-08-2017 - 01:32 | 18-12-2012 - 01:55 | |
| CVE-2011-1419 | 5.8 |
Apache Tomcat 7.x before 7.0.11, when web.xml has no security constraints, does not follow ServletSecurity annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests to a web application. NOTE: this vulnerabi
|
17-08-2017 - 01:34 | 14-03-2011 - 19:55 | |
| CVE-2009-4528 | 6.5 |
The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors.
|
17-08-2017 - 01:31 | 31-12-2009 - 19:30 | |
| CVE-2007-6222 | 6.5 |
The CheckCustomerAccess function in functions.php in CRM-CTT Interleave before 4.2.0 (formerly CRM-CTT) does not properly verify user privileges, which allows remote authenticated users with the LIMITTOCUSTOMERS privilege to bypass intended access re
|
29-07-2017 - 01:34 | 04-12-2007 - 17:46 | |
| CVE-2003-1350 | 4.3 |
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2006-0788 | 5.0 |
Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with "!R!SIOP0", as demonstrated using (1) a connection to to TCP port 9100 or (2) the UNIX lp command.
|
20-07-2017 - 01:30 | 19-02-2006 - 11:02 | |
| CVE-2014-2435 | 4.0 |
Unspecified vulnerability in Oracle MySQL Server 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
|
07-01-2017 - 02:59 | 16-04-2014 - 02:55 | |
| CVE-2016-1384 | 5.0 |
The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.
|
03-12-2016 - 03:20 | 20-04-2016 - 17:59 |