Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2017-7690 | 7.2 |
Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.
|
15-07-2021 - 20:40 | 14-04-2017 - 18:59 | |
CVE-2017-16001 | 7.2 |
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.
|
03-10-2019 - 00:03 | 06-11-2017 - 17:29 | |
CVE-2017-15918 | 2.1 |
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivial and also exposes the user and system keychains to local attacks.
|
03-10-2019 - 00:03 | 01-11-2017 - 17:29 | |
CVE-2017-15884 | 6.9 |
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.
|
03-10-2019 - 00:03 | 31-10-2017 - 18:29 | |
CVE-2017-12579 | 7.2 |
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a root shell.
|
03-10-2019 - 00:03 | 19-10-2017 - 13:29 | |
CVE-2017-11741 | 7.2 |
HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows local users to execute arbitrary code with root privileges by overwriting one of the scripts.
|
03-10-2019 - 00:03 | 08-08-2017 - 19:29 | |
CVE-2007-4582 | 7.5 |
Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allows remote attackers to execute arbitrary code via a long second argument to the SetText method
|
29-09-2017 - 01:29 | 29-08-2007 - 01:17 | |
CVE-2010-2699 | 7.5 |
SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to execute arbitrary SQL commands via the search parameter.
|
13-07-2010 - 04:00 | 12-07-2010 - 17:30 | |
CVE-2010-2700 | 4.3 |
Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to inject arbitrary web script or HTML via the search parameter.
|
13-07-2010 - 04:00 | 12-07-2010 - 17:30 |