| Max CVSS | 10.0 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-6329 | 6.4 |
Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documents, which makes it easier for remote attackers to modify Dublin Core metadata fields, as demonstrated by the (1) LastModifiedBy and
|
15-10-2018 - 21:52 | 13-12-2007 - 19:46 | |
| CVE-2003-1365 | 5.0 |
The escape_dangerous_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including (1) "\" (backslash), (2) "?", (3) "~" (tilde), (4) "^" (carat), (5) newline, or (6) carriage return, which could allow remote atta
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2017-0535 | 2.6 |
An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged proc
|
17-07-2017 - 13:18 | 08-03-2017 - 01:59 | |
| CVE-2014-3300 | 7.5 |
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a craf
|
12-01-2017 - 14:07 | 07-07-2014 - 11:01 | |
| CVE-2014-2198 | 10.0 |
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the support and root accounts by extracting this key from
|
07-01-2017 - 02:59 | 07-07-2014 - 11:01 | |
| CVE-2014-2197 | 9.0 |
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which allows remote authenticated users to modify administra
|
07-01-2017 - 02:59 | 07-07-2014 - 11:01 | |
| CVE-2006-1032 | 7.5 |
Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, exoops, and possibly other programs, allows remote attackers to execute arbitrary PHP code via the base64 tag.
|
08-03-2011 - 02:31 | 07-03-2006 - 11:02 |