| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-5969 | 2.6 |
libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: The maintainer states "I would disagree of a CVE with the Recover parsing option which should
|
05-08-2024 - 16:15 | 11-04-2017 - 16:59 | |
| CVE-2016-8636 | 7.2 |
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.10 allows local users to cause a denial of service (memory corruption), obtain sensitive information from kernel memory, or possibly
|
17-01-2023 - 21:07 | 22-02-2017 - 16:59 | |
| CVE-2017-7531 | 4.0 |
In Moodle 3.3, the course overview block reveals activities in hidden courses.
|
01-12-2020 - 14:52 | 17-07-2017 - 17:29 | |
| CVE-2017-5606 | 4.3 |
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering att
|
22-01-2020 - 16:01 | 09-02-2017 - 20:59 | |
| CVE-2017-5936 | 5.0 |
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions.
|
03-10-2019 - 00:03 | 12-04-2017 - 22:59 | |
| CVE-2017-5938 | 4.3 |
Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via the nav_data name.
|
30-10-2018 - 16:27 | 15-03-2017 - 14:59 | |
| CVE-2014-4107 | 9.3 |
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability tha
|
12-10-2018 - 22:07 | 10-09-2014 - 01:55 | |
| CVE-2008-2686 | 7.5 |
webinc/bxe/scripts/loadsave.php in Flux CMS 1.5.0 and earlier allows remote attackers to execute arbitrary code by overwriting a PHP file in webinc/bxe/scripts/ via a filename in the XML parameter and PHP sequences in the request body, then making a
|
29-09-2017 - 01:31 | 13-06-2008 - 18:41 | |
| CVE-2017-5956 | 2.1 |
The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors involving vertext_buffer_index.
|
11-07-2017 - 01:33 | 20-03-2017 - 16:59 | |
| CVE-2016-10214 | 4.9 |
Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (memory consumption) via a large number of VIRTIO_GPU_CMD_RESOURCE_ATTACH_BACKING commands.
|
11-07-2017 - 01:33 | 20-03-2017 - 16:59 | |
| CVE-2004-2078 | 5.0 |
Red-M Red-Alert 2.7.5 with software 3.1 build 24 allows remote attackers to cause a denial of service (reboot and loss of logged events) via a long request to TCP port 80, possibly triggering a buffer overflow.
|
11-07-2017 - 01:31 | 09-02-2004 - 05:00 | |
| CVE-2004-2079 | 7.5 |
Red-M Red-Alert 2.7.5 with software 3.1 build 24 binds authentication to IP addresses, which allows remote attackers to bypass authentication by connecting from the same IP address as an active authenticated user.
|
11-07-2017 - 01:31 | 09-02-2004 - 05:00 | |
| CVE-2004-2080 | 5.0 |
Red-M Red-Alert 2.7.5 with software 3.1 build 24 converts multiple spaces in a Service Set Identifier (SSID) to a single space, which prevents Red-Alert from correctly identifying the SSID.
|
11-07-2017 - 01:31 | 09-02-2004 - 05:00 | |
| CVE-2017-5937 | 2.1 |
The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference) via a crafted VIRGL_CCMD_CLEAR command.
|
17-03-2017 - 13:21 | 15-03-2017 - 19:59 | |
| CVE-2017-5604 | 4.3 |
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering att
|
01-03-2017 - 02:59 | 09-02-2017 - 20:59 | |
| CVE-2017-5858 | 4.3 |
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering att
|
01-03-2017 - 02:59 | 09-02-2017 - 20:59 |