| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-6601 | 2.1 |
In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in processing of images and PDFs fails to drop group permissions when executing helper scripts.
|
10-02-2023 - 18:31 | 13-03-2019 - 22:29 | |
| CVE-2015-3012 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject arbitrary web script or HTML via a (1) style or (2) font name or (3) javascript or (4) data URI.
|
11-02-2019 - 19:39 | 08-05-2015 - 14:59 | |
| CVE-2015-3617 | 4.6 |
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
|
29-08-2017 - 14:42 | 22-08-2017 - 15:29 | |
| CVE-2015-3615 | 3.5 |
Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving unspecified parameters and a privilege escalation
|
26-08-2017 - 01:29 | 11-08-2017 - 21:29 | |
| CVE-2015-3616 | 7.5 |
SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to execute arbitrary commands via unspecified parameters.
|
26-08-2017 - 01:29 | 11-08-2017 - 21:29 | |
| CVE-2015-3614 | 5.0 |
Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vectors involving another unspecified vulnerability.
|
26-08-2017 - 01:29 | 11-08-2017 - 21:29 | |
| CVE-2008-0463 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Workflow 4.7.x before 4.7.x-1.2 and 5.x before 5.x-1.2 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving node properties.
|
08-08-2017 - 01:29 | 25-01-2008 - 16:00 | |
| CVE-2003-1456 | 5.0 |
Album.pl 6.1 allows remote attackers to execute arbitrary commands, when an alternative configuration file is used, via unknown attack vectors.
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2017-0180 | 7.4 |
A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Hyper-V Remote Code Execution Vulnerability." This
|
11-07-2017 - 01:33 | 12-04-2017 - 14:59 | |
| CVE-2015-2170 | 5.0 |
The upx decoder in ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted file.
|
03-01-2017 - 02:59 | 12-05-2015 - 19:59 | |
| CVE-2015-2221 | 5.0 |
ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file.
|
03-01-2017 - 02:59 | 12-05-2015 - 19:59 | |
| CVE-2015-2222 | 5.0 |
ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file.
|
03-01-2017 - 02:59 | 12-05-2015 - 19:59 | |
| CVE-2015-3011 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a c
|
03-12-2016 - 03:07 | 08-05-2015 - 14:59 | |
| CVE-2015-1895 | 5.0 |
IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the client behavior.
|
04-08-2016 - 03:26 | 25-05-2015 - 00:59 | |
| CVE-2015-1894 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
|
04-08-2016 - 03:26 | 25-05-2015 - 00:59 |