| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-7466 | 8.5 |
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the ability to send facts back to the Ansible server, could
|
04-08-2021 - 17:15 | 22-06-2018 - 13:29 | |
| CVE-2017-7694 | 6.5 |
Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP co
|
25-08-2020 - 15:59 | 11-04-2017 - 23:59 | |
| CVE-2017-7216 | 4.0 |
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters.
|
17-02-2020 - 16:15 | 02-05-2017 - 15:59 | |
| CVE-2017-7218 | 4.6 |
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
|
03-10-2019 - 00:03 | 14-04-2017 - 14:59 | |
| CVE-2017-10100 | 5.8 |
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: HTML Area). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2004-1360 | 2.1 |
Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files.
|
30-10-2018 - 16:26 | 27-02-2004 - 05:00 | |
| CVE-2006-4501 | 7.5 |
SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname, (8) max, and possibly other parameters.
|
17-10-2018 - 21:37 | 31-08-2006 - 22:04 | |
| CVE-2006-4502 | 7.5 |
ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the "Administration Area" script.
|
17-10-2018 - 21:37 | 31-08-2006 - 22:04 | |
| CVE-2006-4500 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) about, (2) again, (3) lastname, (4) email, (5) password, (6) album, (7) id, (8) table, (9) desc,
|
17-10-2018 - 21:37 | 31-08-2006 - 22:04 | |
| CVE-2008-6712 | 5.0 |
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.
|
11-10-2018 - 20:57 | 10-04-2009 - 22:00 | |
| CVE-2017-7217 | 4.0 |
The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters.
|
11-07-2017 - 01:33 | 14-04-2017 - 14:59 | |
| CVE-2016-7552 | 10.0 |
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
|
17-04-2017 - 15:43 | 12-04-2017 - 10:59 | |
| CVE-2016-7957 | 5.0 |
In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-btl2cap.c by avoiding use of a seven-byte memcmp for potentially shorter strings.
|
17-04-2017 - 15:42 | 12-04-2017 - 10:59 |