| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2015-0802 | 5.0 |
Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content
|
30-10-2018 - 16:27 | 01-04-2015 - 10:59 | |
| CVE-2007-2272 | 7.5 |
PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.0 allows remote attackers to execute arbitrary PHP code via a URL in the workdir parameter.
|
11-10-2017 - 01:32 | 25-04-2007 - 20:19 | |
| CVE-2015-0816 | 5.0 |
Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunderbird before 31.6 do not properly restrict resource: URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the a
|
17-09-2017 - 01:29 | 01-04-2015 - 10:59 | |
| CVE-2015-6655 | 6.8 |
Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin/admin_users.php.
|
22-12-2016 - 03:00 | 31-08-2015 - 19:59 |