| Max CVSS | 7.8 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2013-6371 | 5.0 |
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
|
25-09-2023 - 02:30 | 22-04-2014 - 13:06 | |
| CVE-2012-5581 | 6.8 |
Stack-based buffer overflow in tif_dir.c in LibTIFF before 4.0.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DOTRANGE tag in a TIFF image.
|
13-02-2023 - 00:26 | 04-01-2013 - 22:55 | |
| CVE-2014-3985 | 5.0 |
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
|
28-09-2020 - 14:57 | 11-09-2014 - 18:55 | |
| CVE-2014-3985 | 5.0 |
The getHTTPResponse function in miniwget.c in MiniUPnP 1.9 allows remote attackers to cause a denial of service (crash) via crafted headers that trigger an out-of-bounds read.
|
28-09-2020 - 14:57 | 11-09-2014 - 18:55 | |
| CVE-2019-1656 | 4.6 |
A vulnerability in the CLI of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to access the shell of the underlying Linux operating system on the affected device. The vulnerability is due to improper
|
09-10-2019 - 23:47 | 24-01-2019 - 16:29 | |
| CVE-2014-3125 | 6.2 |
Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a denial of service (crash) via unspecified vectors.
|
30-10-2018 - 16:26 | 02-05-2014 - 14:55 | |
| CVE-2014-3121 | 7.6 |
rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands.
|
29-12-2017 - 02:29 | 14-05-2014 - 00:55 | |
| CVE-2014-3146 | 4.3 |
Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme to the clean_html function. Per: http://cwe.mitre.or
|
29-12-2017 - 02:29 | 14-05-2014 - 19:55 | |
| CVE-2017-0062 | 1.9 |
The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain
|
16-08-2017 - 01:29 | 17-03-2017 - 00:59 | |
| CVE-2006-0846 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, which are stored in a log file and not sanitized when
|
20-07-2017 - 01:30 | 22-02-2006 - 02:02 | |
| CVE-2003-0074 | 7.2 |
Format string vulnerability in mpmain.c for plpnfsd of the plptools package allows remote attackers to execute arbitrary code via the functions (1) debuglog, (2) errorlog, and (3) infolog.
|
18-10-2016 - 02:29 | 19-02-2003 - 05:00 | |
| CVE-2014-3000 | 7.8 |
The TCP reassembly function in the inet module in FreeBSD 8.3 before p16, 8.4 before p9, 9.1 before p12, 9.2 before p5, and 10.0 before p2 allows remote attackers to cause a denial of service (undefined memory access and system crash) or possibly rea
|
21-06-2014 - 04:41 | 02-05-2014 - 14:55 | |
| CVE-2014-3001 | 5.8 |
The device file system (aka devfs) in FreeBSD 10.0 before p2 does not load default rulesets when booting, which allows context-dependent attackers to bypass intended restrictions by leveraging a jailed device node process.
|
05-05-2014 - 14:54 | 02-05-2014 - 14:55 |