| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-10074 | 5.1 |
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Difficult to exploit vulnerability allows unauthent
|
27-06-2022 - 17:36 | 08-08-2017 - 15:29 | |
| CVE-2017-7377 | 2.1 |
The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of service (file descriptor or memory consumption) via vectors related to an already in-use fid.
|
10-09-2020 - 17:40 | 10-04-2017 - 15:59 | |
| CVE-2017-7388 | 4.3 |
A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'. The vulnerability exists due to insufficient filtration of user-supplied data (token) passed to the 'wallacepos-master/myaccount/resetpassword.php' URL. An attacker could execute arb
|
30-06-2020 - 18:04 | 01-04-2017 - 02:59 | |
| CVE-2017-7389 | 4.3 |
Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'. The vulnerabilities exist due to insufficient filtration of user-supplied data (meeting_id, user) passed to the 'openeclass-master/modules/tc/webconf/webconf.php' URL.
|
26-02-2020 - 16:56 | 01-04-2017 - 02:59 | |
| CVE-2004-0167 | 7.5 |
DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.
|
26-09-2018 - 15:59 | 15-03-2004 - 05:00 | |
| CVE-2017-6837 | 4.3 |
WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coefficients.
|
04-11-2017 - 01:29 | 20-03-2017 - 16:59 | |
| CVE-2006-4444 | 6.5 |
Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the (1) tid parameter in the (a) todo/view (aka TODO List View), (b) todo/modify (aka TODO List Modify),
|
20-07-2017 - 01:33 | 29-08-2006 - 23:04 | |
| CVE-2017-6448 | 6.8 |
The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.
|
10-04-2017 - 21:37 | 03-04-2017 - 05:59 | |
| CVE-2017-7390 | 4.3 |
A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/template/pw_forgot.php' URL. An attacker could execute
|
05-04-2017 - 01:59 | 01-04-2017 - 02:59 | |
| CVE-2017-7391 | 4.3 |
A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the 'magmi-git-master/magmi/web/ajax_gettime.php' URL. An attacker could execute arbitrary
|
05-04-2017 - 01:59 | 01-04-2017 - 02:59 | |
| CVE-2017-6949 | 6.8 |
An issue was discovered in CHICKEN Scheme through 4.12.0. When using a nonstandard CHICKEN-specific extension to allocate an SRFI-4 vector in unmanaged memory, the vector size would be used in unsanitised form as an argument to malloc(). With an unex
|
05-04-2017 - 01:59 | 16-03-2017 - 17:59 | |
| CVE-2016-9169 | 4.3 |
A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScript in the context of a valid user's browser sessio
|
05-04-2017 - 01:59 | 23-03-2017 - 06:59 | |
| CVE-2016-9167 | 5.0 |
NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL.
|
05-04-2017 - 01:59 | 23-03-2017 - 06:59 | |
| CVE-2015-3223 | 5.0 |
The ldb_wildcard_compare function in ldb_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles certain zero values, which allows remote attackers to cause a deni
|
31-12-2016 - 02:59 | 29-12-2015 - 22:59 | |
| CVE-2010-1654 | 7.5 |
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the (1) username (aka login) and (2) password parameters. NOTE: some of these de
|
03-05-2010 - 13:51 | 03-05-2010 - 13:51 |