| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-0661 | 10.0 |
The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows
|
28-09-2020 - 12:58 | 13-04-2011 - 18:55 | |
| CVE-2011-0661 | 10.0 |
The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly validate fields in SMB requests, which allows
|
28-09-2020 - 12:58 | 13-04-2011 - 18:55 | |
| CVE-2016-7474 | 2.1 |
In some cases the MCPD binary cache in F5 BIG-IP devices may allow a user with Advanced Shell access, or privileges to generate a qkview, to temporarily obtain normally unrecoverable information.
|
06-06-2019 - 15:11 | 27-03-2017 - 15:59 | |
| CVE-2015-4896 | 5.0 |
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availabili
|
12-02-2019 - 18:42 | 21-10-2015 - 23:59 | |
| CVE-2003-0166 | 7.5 |
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_r
|
30-10-2018 - 16:25 | 02-04-2003 - 05:00 | |
| CVE-2006-1385 | 5.1 |
Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame. Update to version R73p.
|
18-10-2018 - 16:32 | 24-03-2006 - 11:02 | |
| CVE-2015-1401 | 7.5 |
Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.
|
08-09-2017 - 15:56 | 28-08-2017 - 15:29 | |
| CVE-2014-8036 | 5.0 |
The outlookpa component in Cisco WebEx Meetings Server does not properly validate API input, which allows remote attackers to modify a meeting's invite list via a crafted URL, aka Bug ID CSCuj40254.
|
08-09-2017 - 01:29 | 10-01-2015 - 02:59 | |
| CVE-2014-8035 | 5.0 |
The web framework in Cisco WebEx Meetings Server produces different returned messages for URL requests depending on whether a username exists, which allows remote attackers to enumerate user accounts via a series of requests, aka Bug ID CSCuj40247.
|
08-09-2017 - 01:29 | 10-01-2015 - 02:59 | |
| CVE-2015-1404 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
04-02-2015 - 05:24 | 03-02-2015 - 16:59 | |
| CVE-2015-1402 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
04-02-2015 - 05:23 | 03-02-2015 - 16:59 | |
| CVE-2015-1403 | 7.5 |
SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
04-02-2015 - 05:16 | 03-02-2015 - 16:59 | |
| CVE-2015-1405 | 7.5 |
SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
04-02-2015 - 05:13 | 03-02-2015 - 16:59 | |
| CVE-2014-9560 | 7.5 |
SQL injection vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to execute arbitrary SQL commands via the post parameter.
|
16-01-2015 - 16:30 | 15-01-2015 - 15:59 | |
| CVE-2014-9561 | 4.3 |
Cross-site scripting (XSS) vulnerability in redir_last_post_list.php in SoftBB 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the post parameter.
|
16-01-2015 - 16:30 | 15-01-2015 - 15:59 | |
| CVE-2014-9308 | 6.5 |
Unrestricted file upload vulnerability in inc/amfphp/administration/banneruploaderscript.php in the WP EasyCart (aka WordPress Shopping Cart) plugin before 3.0.9 allows remote authenticated users to execute arbitrary code by uploading a file with an
|
16-01-2015 - 16:29 | 15-01-2015 - 15:59 | |
| CVE-2014-3207 | 4.3 |
Cross-site scripting (XSS) vulnerability in wserver.ml in SKS Keyserver before 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to pks/lookup/undefined1.
|
09-05-2014 - 17:37 | 08-05-2014 - 14:29 | |
| CVE-2008-0225 | 6.4 |
Heap-based buffer overflow in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmff_dump_header funct
|
17-10-2011 - 04:00 | 10-01-2008 - 23:46 |