| Max CVSS | 10.0 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-6778 | 4.6 |
In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
|
24-08-2020 - 17:37 | 21-03-2019 - 16:01 | |
| CVE-2006-0868 | 7.5 |
Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage container
|
18-10-2018 - 16:29 | 23-02-2006 - 23:02 | |
| CVE-2003-1447 | 1.9 |
IBM WebSphere Advanced Server Edition 4.0.4 uses a weak encryption algorithm (XOR and base64 encoding), which allows local users to decrypt passwords when the configuration file is exported to XML.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2017-6503 | 4.3 |
WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.
|
14-03-2017 - 01:59 | 06-03-2017 - 02:59 | |
| CVE-2014-3803 | 4.3 |
The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.
|
07-01-2017 - 03:00 | 21-05-2014 - 11:14 | |
| CVE-2014-3870 | 4.3 |
Cross-site scripting (XSS) vulnerability in the bib2html plugin 0.9.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the styleShortName parameter in an adminStyleAdd action to OSBiB/create/index.php.
|
28-05-2014 - 14:02 | 27-05-2014 - 13:55 | |
| CVE-2014-2269 | 6.4 |
modules/Users/ForgotPassword.php in vTiger 6.0 before Security Patch 2 allows remote attackers to reset the password for arbitrary users via a request containing the username, password, and confirmPassword parameters.
|
22-04-2014 - 16:31 | 22-04-2014 - 13:06 | |
| CVE-2009-1972 | 2.1 |
Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.
|
23-10-2012 - 03:07 | 22-10-2009 - 18:30 | |
| CVE-2007-5939 | 10.0 |
The gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability
|
15-11-2008 - 07:02 | 06-12-2007 - 15:46 |