Max CVSS | 10.0 | Min CVSS | 6.5 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2014-0514 | 9.3 |
The Adobe Reader Mobile application before 11.2 for Android does not properly restrict use of JavaScript, which allows remote attackers to execute arbitrary code via a crafted PDF document, a related issue to CVE-2012-6636.
|
09-10-2018 - 19:42 | 15-04-2014 - 23:13 | |
CVE-2017-17619 | 7.5 |
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
|
26-12-2017 - 16:30 | 13-12-2017 - 09:29 | |
CVE-2007-0864 | 7.5 |
SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL commands via the id parameter.
|
19-10-2017 - 01:30 | 09-02-2007 - 01:28 | |
CVE-2014-3138 | 6.5 |
SQL injection vulnerability in Xerox DocuShare before 6.53 Patch 6 Hotfix 2, 6.6.1 Update 1 before Hotfix 24, and 6.6.1 Update 2 before Hotfix 3 allows remote authenticated users to execute arbitrary SQL commands via the PATH_INFO to /docushare/dsweb
|
29-08-2017 - 01:34 | 02-05-2014 - 00:55 | |
CVE-2014-3008 | 10.0 |
Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php.
|
29-08-2017 - 01:34 | 28-04-2014 - 14:09 | |
CVE-2014-3139 | 7.5 |
recoveryconsole/bpl/snmpd.php in Unitrends Enterprise Backup 7.3.0 allows remote attackers to bypass authentication by setting the auth parameter to a certain string.
|
05-05-2014 - 12:57 | 02-05-2014 - 10:55 |