| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-8344 | 4.3 |
In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file.
|
03-10-2019 - 00:03 | 30-04-2017 - 17:59 | |
| CVE-2017-8345 | 4.3 |
In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file.
|
03-10-2019 - 00:03 | 30-04-2017 - 17:59 | |
| CVE-2017-8343 | 4.3 |
In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file.
|
03-10-2019 - 00:03 | 30-04-2017 - 17:59 | |
| CVE-2017-0597 | 9.3 |
An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to eleva
|
03-10-2019 - 00:03 | 12-05-2017 - 15:29 | |
| CVE-2017-0599 | 7.1 |
A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Pro
|
03-10-2019 - 00:03 | 12-05-2017 - 15:29 | |
| CVE-2017-0601 | 4.3 |
An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user interaction
|
03-10-2019 - 00:03 | 12-05-2017 - 15:29 | |
| CVE-2017-0596 | 9.3 |
An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain loc
|
03-10-2019 - 00:03 | 12-05-2017 - 15:29 | |
| CVE-2017-10119 | 4.9 |
Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: OSB Web Console Design, Admin). The supported version that is affected is 11.1.1.9.0. Easily exploitable vulnerability allows low privileged attacker with ne
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2006-4599 | 7.5 |
SQL injection vulnerability in aut_verifica.inc.php in Autentificator 2.01 allows remote attackers to execute arbitrary SQL commands via the user parameter.
|
17-10-2018 - 21:38 | 07-09-2006 - 00:04 | |
| CVE-2008-2968 | 7.5 |
SQL injection vulnerability in rating.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the book_id parameter.
|
11-10-2018 - 20:45 | 02-07-2008 - 17:14 | |
| CVE-2008-2967 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) query string to login.php and the (2) glb_sid parameter
|
11-10-2018 - 20:45 | 02-07-2008 - 17:14 | |
| CVE-2008-2969 | 5.0 |
Directory traversal vulnerability in download.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to read arbitrary files via a .. (dot dot) in the dfile parameter.
|
11-10-2018 - 20:45 | 02-07-2008 - 17:14 | |
| CVE-2008-2970 | 7.5 |
Multiple session fixation vulnerabilities in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allow remote attackers to hijack web sessions by setting the PHPSESSID parameter to (1) index.php and (2) login.php in homepg/.
|
11-10-2018 - 20:45 | 02-07-2008 - 17:14 | |
| CVE-2008-2878 | 6.4 |
Open redirect vulnerability in rss_getfile.php in Academic Web Tools (AWT YEKTA) 1.4.3.1, and 1.4.2.8 and earlier, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the file parameter.
|
11-10-2018 - 20:44 | 26-06-2008 - 17:41 | |
| CVE-2004-0154 | 5.0 |
rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.
|
11-10-2017 - 01:29 | 14-06-2004 - 04:00 | |
| CVE-2017-0226 | 7.6 |
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0222.
|
23-05-2017 - 18:05 | 12-05-2017 - 14:29 | |
| CVE-2017-0598 | 4.3 |
An information disclosure vulnerability in the Framework APIs could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be use
|
19-05-2017 - 15:32 | 12-05-2017 - 15:29 |