| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-4645 | 4.3 |
Cross-site scripting (XSS) vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname.
|
26-04-2023 - 18:55 | 25-06-2014 - 20:55 | |
| CVE-2015-0272 | 5.0 |
GNOME NetworkManager allows remote attackers to cause a denial of service (IPv6 traffic disruption) via a crafted MTU value in an IPv6 Router Advertisement (RA) message, a different vulnerability than CVE-2015-8215.
|
13-02-2023 - 00:46 | 17-11-2015 - 15:59 | |
| CVE-2003-1397 | 4.3 |
The PluginContext object of Opera 6.05 and 7.0 allows remote attackers to cause a denial of service (crash) via an HTTP request containing a long string that gets passed to the ShowDocument method.
|
01-03-2022 - 20:21 | 31-12-2003 - 05:00 | |
| CVE-2019-7298 | 9.3 |
An issue was discovered on D-Link DIR-823G devices with firmware through 1.02B03. A command Injection vulnerability allows attackers to execute arbitrary OS commands via a crafted /HNAP1 request. This occurs when any HNAP API function triggers a call
|
05-02-2019 - 15:13 | 01-02-2019 - 06:29 | |
| CVE-2009-4587 | 5.0 |
Cherokee Web Server 0.5.4 allows remote attackers to cause a denial of service (daemon crash) via an MS-DOS reserved word in a URI, as demonstrated by the AUX reserved word.
|
10-10-2018 - 19:49 | 07-01-2010 - 18:30 | |
| CVE-2014-0244 | 3.3 |
The sys_recvfrom function in nmbd in Samba 3.6.x before 3.6.24, 4.0.x before 4.0.19, and 4.1.x before 4.1.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed UDP packet.
|
09-10-2018 - 19:41 | 23-06-2014 - 14:55 | |
| CVE-2014-4612 | 4.3 |
Cross-site scripting (XSS) vulnerability in the keywords manager (keywordmgr.php) in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
09-04-2018 - 13:58 | 16-03-2018 - 17:29 | |
| CVE-2014-3471 | 2.1 |
Use-after-free vulnerability in hw/pci/pcie.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (QEMU instance crash) via hotplug and hotunplug operations of Virtio block devices.
|
31-01-2018 - 14:51 | 12-01-2018 - 17:29 | |
| CVE-2007-6327 | 7.5 |
Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method.
|
29-09-2017 - 01:29 | 13-12-2007 - 19:46 | |
| CVE-2012-4431 | 4.3 |
org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.
|
19-09-2017 - 01:35 | 19-12-2012 - 11:55 | |
| CVE-2011-0161 | 4.3 |
WebKit, as used in Apple Safari before 5.0.4 and iOS before 4.3, does not properly handle the Attr.style accessor, which allows remote attackers to bypass the Same Origin Policy and inject Cascading Style Sheets (CSS) token sequences via a crafted we
|
17-08-2017 - 01:33 | 11-03-2011 - 22:55 | |
| CVE-2017-6803 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remote attackers to hijack the authentication of users for requests that (1) change the admin pa
|
23-03-2017 - 17:22 | 20-03-2017 - 16:59 | |
| CVE-2014-4615 | 5.0 |
The notifier middleware in OpenStack PyCADF 0.5.0 and earlier, Telemetry (Ceilometer) 2013.2 before 2013.2.4 and 2014.x before 2014.1.2, Neutron 2014.x before 2014.1.2 and Juno before Juno-2, and Oslo allows remote authenticated users to obtain X_AUT
|
07-01-2017 - 03:00 | 19-08-2014 - 18:55 | |
| CVE-2014-4644 | 7.5 |
SQL injection vulnerability in superlinks.php in the superlinks plugin 1.4-2 for Cacti allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
12-01-2015 - 07:10 | 25-06-2014 - 20:55 | |
| CVE-2014-2965 | 4.3 |
Cross-site scripting (XSS) vulnerability in auth-settings-x.php in SpamTitan before 6.04 allows remote attackers to inject arbitrary web script or HTML via the sortdir parameter.
|
17-07-2014 - 05:06 | 03-07-2014 - 14:55 |