| Max CVSS | 7.5 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-3497 | 4.3 |
Cross-site scripting (XSS) vulnerability in OpenStack Swift 1.11.0 through 1.13.1 allows remote attackers to inject arbitrary web script or HTML via the WWW-Authenticate header.
|
13-02-2023 - 00:39 | 03-07-2014 - 17:55 | |
| CVE-2019-4040 | 4.3 |
IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
|
03-12-2022 - 14:46 | 31-01-2019 - 15:29 | |
| CVE-2014-4616 | 4.3 |
Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decod
|
13-07-2022 - 15:04 | 24-08-2017 - 20:29 | |
| CVE-2003-1387 | 7.5 |
Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long username.
|
01-03-2022 - 20:15 | 31-12-2003 - 05:00 | |
| CVE-2014-3494 | 4.3 |
kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.
|
30-10-2018 - 16:27 | 01-07-2014 - 16:55 | |
| CVE-2011-0166 | 5.8 |
The HTML5 drag and drop functionality in WebKit in Apple Safari before 5.0.4 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information via vectors related to the dragging of content. NOTE: this might ove
|
17-08-2017 - 01:33 | 11-03-2011 - 22:55 | |
| CVE-2006-0934 | 4.3 |
Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form.
|
20-07-2017 - 01:30 | 28-02-2006 - 11:02 | |
| CVE-2014-8583 | 6.9 |
mod_wsgi before 4.2.4 for Apache, when creating a daemon process group, does not properly handle when group privileges cannot be dropped, which might allow attackers to gain privileges via unspecified vectors.
|
01-07-2017 - 01:29 | 16-12-2014 - 18:59 | |
| CVE-2014-3296 | 4.0 |
The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527.
|
12-01-2017 - 14:07 | 21-06-2014 - 15:55 |