Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2019-6149 | 7.2 |
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
|
21-03-2019 - 16:01 | 18-03-2019 - 01:32 | |
CVE-2006-1697 | 4.3 |
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message.
|
18-10-2018 - 16:33 | 11-04-2006 - 10:02 | |
CVE-2008-0477 | 10.0 |
Stack-based buffer overflow in the QMPUpgrade.Upgrade.1 ActiveX control in QMPUpgrade.dll 1.0.0.1 in Move Networks Upgrade Manager allows remote attackers to execute arbitrary code via a long first argument to the Upgrade method. NOTE: some of these
|
29-09-2017 - 01:30 | 29-01-2008 - 20:00 | |
CVE-2003-1463 | 3.5 |
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) rea
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
CVE-2015-3417 | 6.8 |
Use-after-free vulnerability in the ff_h264_free_tables function in libavcodec/h264.c in FFmpeg before 2.3.6 allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted H.264 data in an MP4 file, as demo
|
01-07-2017 - 01:29 | 24-04-2015 - 17:59 | |
CVE-2017-0186 | 6.3 |
A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Windows Server 2012 R2, or Windows Server 2016 host server fails to properly validate input from a privileged us
|
18-04-2017 - 16:53 | 12-04-2017 - 14:59 | |
CVE-2015-1250 | 7.5 |
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
|
03-01-2017 - 02:59 | 01-05-2015 - 10:59 | |
CVE-2015-1243 | 7.5 |
Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or poss
|
03-01-2017 - 02:59 | 01-05-2015 - 10:59 | |
CVE-2009-4431 | 7.5 |
PHP remote file inclusion vulnerability in cal_popup.php in the Anything Digital Development JCal Pro (aka com_jcalpro or JCP) component 1.5.3.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_pat
|
29-06-2010 - 04:00 | 28-12-2009 - 19:00 |