| Max CVSS | 10.0 | Min CVSS | 3.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-0517 | 7.6 |
An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a
|
03-10-2019 - 00:03 | 08-03-2017 - 01:59 | |
| CVE-2014-8952 | 7.1 |
Multiple unspecified vulnerabilities in Check Point Security Gateway R75.40VS, R75.45, R75.46, R75.47, R76, R77, and R77.10, when the (1) IPS blade, (2) IPsec Remote Access, (3) Mobile Access / SSL VPN blade, (4) SSL Network Extender, (5) Identify Aw
|
08-09-2017 - 01:29 | 16-11-2014 - 17:59 | |
| CVE-2014-8951 | 7.1 |
Unspecified vulnerability in Check Point Security Gateway R75, R76, R77, and R77.10, when UserCheck is enabled and the (1) Application Control, (2) URL Filtering, (3) DLP, (4) Threat Emulation, (5) Anti-Bot, or (6) Anti-Virus blade is used, allows re
|
08-09-2017 - 01:29 | 16-11-2014 - 17:59 | |
| CVE-2014-8950 | 7.1 |
Unspecified vulnerability in Check Point Security Gateway R77 and R77.10, when the (1) URL Filtering or (2) Identity Awareness blade is used, allows remote attackers to cause a denial of service (crash) via vectors involving an HTTPS request.
|
08-09-2017 - 01:29 | 16-11-2014 - 17:59 | |
| CVE-2012-5512 | 3.2 |
Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) or obtain sensitive information via unspecified vectors.
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2007-6373 | 7.5 |
Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the (1) categorie parameter to catdownload.php, or the id parameter to (2) download.php or (3) hitcounter.php.
|
08-08-2017 - 01:29 | 15-12-2007 - 01:46 | |
| CVE-2003-1441 | 4.3 |
Posadis 0.50.4 through 0.50.8 allows remote attackers to cause a denial of service (crash) via a DNS message without a question section, which triggers null dereference.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2006-0933 | 4.3 |
Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a url XCode tag in a posted message. NOTE: the provenance of this information is unknown; the details are o
|
20-07-2017 - 01:30 | 28-02-2006 - 11:02 | |
| CVE-2015-6677 | 10.0 |
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to exec
|
17-02-2017 - 02:59 | 22-09-2015 - 10:59 | |
| CVE-2015-5578 | 10.0 |
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to exec
|
17-02-2017 - 02:59 | 22-09-2015 - 10:59 | |
| CVE-2015-5575 | 10.0 |
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to exec
|
17-02-2017 - 02:59 | 22-09-2015 - 10:59 | |
| CVE-2015-5588 | 10.0 |
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to exec
|
17-02-2017 - 02:59 | 22-09-2015 - 10:59 | |
| CVE-2015-5580 | 10.0 |
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to exec
|
17-02-2017 - 02:59 | 22-09-2015 - 10:59 | |
| CVE-2015-5582 | 10.0 |
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to exec
|
17-02-2017 - 02:59 | 22-09-2015 - 10:59 | |
| CVE-2015-5577 | 10.0 |
Adobe Flash Player before 18.0.0.241 and 19.x before 19.0.0.185 on Windows and OS X and before 11.2.202.521 on Linux, Adobe AIR before 19.0.0.190, Adobe AIR SDK before 19.0.0.190, and Adobe AIR SDK & Compiler before 19.0.0.190 allow attackers to exec
|
17-02-2017 - 02:59 | 22-09-2015 - 10:59 | |
| CVE-2014-4159 | 5.8 |
Open redirect vulnerability in in la/umTestSSO.jsp in SAP Supplier Relationship Management (SRM) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. Per: http://cwe.mitre.org
|
16-12-2016 - 02:59 | 13-06-2014 - 14:55 | |
| CVE-2014-4160 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter.
|
21-06-2014 - 04:41 | 13-06-2014 - 14:55 |