| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-8165 | 10.0 |
scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.
|
13-02-2023 - 00:44 | 19-02-2015 - 15:59 | |
| CVE-2014-4630 | 4.3 |
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to o
|
09-12-2021 - 18:31 | 30-12-2014 - 15:59 | |
| CVE-2015-4854 | 4.3 |
Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Single Signon. NOTE: the previous i
|
10-12-2018 - 19:29 | 21-10-2015 - 23:59 | |
| CVE-2006-1398 | 4.3 |
Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the g_message parameter.
|
18-10-2018 - 16:32 | 28-03-2006 - 11:06 | |
| CVE-2014-8757 | 8.3 |
LG On-Screen Phone (OSP) before 4.3.010 allows remote attackers to bypass authorization via a crafted request.
|
09-10-2018 - 19:54 | 17-02-2015 - 15:59 | |
| CVE-2003-0135 | 7.5 |
vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers (tcp_wrappers) but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended.
|
11-10-2017 - 01:29 | 11-04-2003 - 04:00 | |
| CVE-2008-0242 | 7.2 |
Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to login device permissions.
|
29-09-2017 - 01:30 | 12-01-2008 - 02:46 | |
| CVE-2015-1559 | 6.8 |
Multiple cross-site request forgery (CSRF) vulnerabilities in administrator.php in Epignosis eFront Open Source Edition before 3.6.15.3 build 18022 allow remote attackers to hijack the authentication of administrators for requests that (1) delete mod
|
08-09-2017 - 01:29 | 10-02-2015 - 17:59 | |
| CVE-2012-5876 | 5.0 |
Multiple off-by-one errors in NMMediaServerService.dll in Nero MediaHome 4.5.8.0 and earlier allow remote attackers to cause a denial of service (crash) via a long string in the (1) request line or (2) HTTP Referer header to TCP port 54444, which tri
|
29-08-2017 - 01:32 | 30-05-2014 - 14:55 | |
| CVE-2012-5877 | 5.0 |
Nero MediaHome 4.5.8.0 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an HTTP header without a name. Per http://cwe.mitre.org/data/definitions/476.html
"CWE-476: NULL Pointer Dereference"
|
29-08-2017 - 01:32 | 30-05-2014 - 14:55 | |
| CVE-2017-7241 | 3.5 |
A cross-site scripting (XSS) vulnerability in the MantisBT Move Attachments page (move_attachments_page.php, part of admin tools) allows remote attackers to inject arbitrary code through a crafted 'type' parameter, if Content Security Protection (CSP
|
12-07-2017 - 01:29 | 31-03-2017 - 04:59 | |
| CVE-2015-0231 | 7.5 |
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call th
|
31-12-2016 - 02:59 | 27-01-2015 - 20:03 | |
| CVE-2013-6501 | 4.6 |
The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL injection attacks by creating a file under /tmp wit
|
30-11-2016 - 02:59 | 30-03-2015 - 10:59 | |
| CVE-2009-4149 | 4.3 |
Cross-site scripting (XSS) vulnerability in the web interface in CA Service Desk 12.1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter.
|
10-12-2009 - 05:00 | 09-12-2009 - 18:30 |