| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-2998 | 9.3 |
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK API functionality related to timeline interactions. Successful exploitation could lead to arbitrary code execution.
|
27-01-2023 - 18:12 | 14-03-2017 - 16:59 | |
| CVE-2017-2999 | 9.3 |
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime TVSDK functionality related to hosting playback surface. Successful exploitation could lead to arbitrary code execution.
|
24-01-2023 - 14:37 | 14-03-2017 - 16:59 | |
| CVE-2017-2997 | 9.3 |
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the Primetime TVSDK that supports customizing ad information. Successful exploitation could lead to arbitrary code execution.
|
24-01-2023 - 14:31 | 14-03-2017 - 16:59 | |
| CVE-2017-3003 | 9.3 |
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to an interaction between the privacy user interface and the ActionScript 2 Camera object. Successful exploitation could lead to arbitrary cod
|
24-01-2023 - 14:27 | 14-03-2017 - 16:59 | |
| CVE-2017-3002 | 9.3 |
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript2 TextField object related to the variable property. Successful exploitation could lead to arbitrary code execution.
|
24-01-2023 - 14:26 | 14-03-2017 - 16:59 | |
| CVE-2017-3001 | 9.3 |
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage collection in the ActionScript 2 VM. Successful exploitation could lead to arbitrary code execution.
|
24-01-2023 - 14:21 | 14-03-2017 - 16:59 | |
| CVE-2017-3000 | 4.3 |
Adobe Flash Player versions 24.0.0.221 and earlier have a vulnerability in the random number generator used for constant blinding. Successful exploitation could lead to information disclosure.
|
24-01-2023 - 14:09 | 14-03-2017 - 16:59 | |
| CVE-2017-10032 | 5.5 |
Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List). Supported versions that are affected are 6.3.4.1, 6.3.5.1, 6.3.6.1, 6.3.7.1, 6.4.0, 6.4.1 and 6.4.2. Easily exp
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2017-9844 | 7.5 |
SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object in a request to metadatauploader, aka SAP Security Note 2399804.
|
10-12-2018 - 19:29 | 12-07-2017 - 16:29 | |
| CVE-2004-0077 | 7.2 |
The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local
|
03-05-2018 - 01:29 | 03-03-2004 - 05:00 | |
| CVE-2006-4262 | 5.1 |
Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple vectors including (1) a long pathname that is not properly handled during file li
|
11-10-2017 - 01:31 | 23-08-2006 - 10:04 | |
| CVE-2014-6270 | 6.8 |
Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted UDP SNMP request, whic
|
08-09-2017 - 01:29 | 12-09-2014 - 14:55 | |
| CVE-2008-6733 | 4.3 |
Cross-site scripting (XSS) vulnerability in the error handling page in DotNetNuke 4.6.2 through 4.8.3 allows remote attackers to inject arbitrary web script or HTML via the querystring parameter.
|
17-08-2017 - 01:29 | 21-04-2009 - 18:30 | |
| CVE-2008-6732 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Language skin object in DotNetNuke before 4.8.4 allows remote attackers to inject arbitrary web script or HTML via "newly generated paths."
|
17-08-2017 - 01:29 | 21-04-2009 - 18:30 | |
| CVE-2017-2983 | 6.8 |
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege.
|
17-07-2017 - 13:18 | 14-03-2017 - 16:59 | |
| CVE-2015-8664 | 7.5 |
Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel arra
|
07-12-2016 - 18:29 | 24-12-2015 - 03:59 |