| Max CVSS | 7.6 | Min CVSS | 3.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-20669 | 7.2 |
An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function ca
|
11-04-2023 - 18:16 | 21-03-2019 - 16:00 | |
| CVE-2014-3460 | 6.8 |
Directory traversal vulnerability in the DumpToFile method in the NQMcsVarSet ActiveX control in Agent Manager in NetIQ Sentinel allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via a crafted pathname.
|
13-04-2021 - 17:21 | 20-05-2014 - 11:13 | |
| CVE-2007-5989 | 6.8 |
Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.
|
15-10-2018 - 21:48 | 13-12-2007 - 21:46 | |
| CVE-2006-1244 | 7.6 |
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving error
|
03-10-2018 - 21:36 | 15-03-2006 - 19:06 | |
| CVE-2015-5715 | 4.0 |
The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 allows remote authenticated users to bypass intended access restrictions, and arrange for a private post to be published and sticky,
|
04-11-2017 - 01:29 | 22-05-2016 - 01:59 | |
| CVE-2003-1366 | 3.3 |
chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to store user database information.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2017-0107 | 4.3 |
Microsoft SharePoint Server fails to sanitize crafted web requests, allowing remote attackers to run cross-script in local security context, aka "Microsoft SharePoint XSS Vulnerability."
|
12-07-2017 - 01:29 | 17-03-2017 - 00:59 | |
| CVE-2014-3789 | 7.5 |
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
|
08-12-2016 - 03:05 | 22-05-2014 - 23:55 | |
| CVE-2009-1991 | 3.6 |
Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous informatio
|
23-10-2012 - 03:07 | 22-10-2009 - 18:30 |