| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2003-0431 | 10.0 |
The tvb_get_nstringz0 function in Ethereal 0.9.12 and earlier does not properly handle a zero-length buffer size, with unknown consequences.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2003-0429 | 7.5 |
The OSI dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via invalid IPv4 or IPv6 prefix lengths, possibly triggering a buffer overflow.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2003-0428 | 5.0 |
Unknown vulnerability in the DCERPC (DCE/RPC) dissector in Ethereal 0.9.12 and earlier allows remote attackers to cause a denial of service (memory consumption) via a certain NDR string.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2003-0432 | 10.0 |
Ethereal 0.9.12 and earlier does not handle certain strings properly, with unknown consequences, in the (1) BGP, (2) WTP, (3) DNS, (4) 802.11, (5) ISAKMP, (6) WSP, (7) CLNP, (8) ISIS, and (9) RMI dissectors.
|
14-02-2024 - 01:17 | 24-07-2003 - 04:00 | |
| CVE-2010-5312 | 4.3 |
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option.
|
21-06-2023 - 18:26 | 24-11-2014 - 16:59 | |
| CVE-2015-3451 | 5.0 |
The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.
|
29-04-2020 - 13:17 | 12-05-2015 - 19:59 | |
| CVE-2015-3012 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in WebODF before 0.5.5, as used in ownCloud, allow remote attackers to inject arbitrary web script or HTML via a (1) style or (2) font name or (3) javascript or (4) data URI.
|
11-02-2019 - 19:39 | 08-05-2015 - 14:59 | |
| CVE-2015-3013 | 6.0 |
ownCloud Server before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allows remote authenticated users to bypass the file blacklist and upload arbitrary files via a file path with UTF-8 encoding, as demonstrated by uploading a .htaccess file.
|
07-02-2019 - 15:02 | 08-05-2015 - 14:59 | |
| CVE-2015-3153 | 5.0 |
The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
|
17-10-2018 - 01:29 | 01-05-2015 - 15:59 | |
| CVE-2014-5008 | 7.5 |
Snoopy allows remote attackers to execute arbitrary commands.
|
04-04-2017 - 16:57 | 31-03-2017 - 16:59 | |
| CVE-2015-1250 | 7.5 |
Multiple unspecified vulnerabilities in Google Chrome before 42.0.2311.135 allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
|
03-01-2017 - 02:59 | 01-05-2015 - 10:59 | |
| CVE-2015-1243 | 7.5 |
Use-after-free vulnerability in the MutationObserver::disconnect function in core/dom/MutationObserver.cpp in the DOM implementation in Blink, as used in Google Chrome before 42.0.2311.135, allows remote attackers to cause a denial of service or poss
|
03-01-2017 - 02:59 | 01-05-2015 - 10:59 | |
| CVE-2015-3011 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in the contacts application in ownCloud Server Community Edition before 5.0.19, 6.x before 6.0.7, and 7.x before 7.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a c
|
03-12-2016 - 03:07 | 08-05-2015 - 14:59 | |
| CVE-2015-3337 | 4.3 |
Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.
|
25-06-2015 - 16:07 | 01-05-2015 - 15:59 |