| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-5123 | 10.0 |
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12
|
02-07-2024 - 17:42 | 14-07-2015 - 10:59 | |
| CVE-2015-5122 | 10.0 |
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and
|
02-07-2024 - 17:42 | 14-07-2015 - 10:59 | |
| CVE-2006-1836 | 6.8 |
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
|
18-10-2018 - 16:36 | 19-04-2006 - 16:06 | |
| CVE-2008-0688 | 4.3 |
Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action.
|
15-10-2018 - 22:02 | 12-02-2008 - 01:00 | |
| CVE-2015-1438 | 7.2 |
Heap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows attackers to execute arbitrary code with kernel privileges via a crafted size input for allocated kernel paged pool and allocated non-paged pool buffers.
|
31-07-2017 - 17:43 | 25-07-2017 - 18:29 | |
| CVE-2003-1486 | 5.0 |
Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list
|
29-07-2017 - 01:29 | 31-12-2003 - 05:00 | |
| CVE-2017-7625 | 7.5 |
In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code.
|
17-04-2017 - 18:17 | 10-04-2017 - 17:59 | |
| CVE-2015-7905 | 7.5 |
Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors.
|
12-01-2017 - 12:05 | 13-11-2015 - 03:59 | |
| CVE-2015-6478 | 6.8 |
Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an unspecified impact via a crafted web site.
|
07-12-2016 - 18:20 | 13-11-2015 - 03:59 |