| Max CVSS | 7.5 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-0165 | 7.2 |
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted a
|
27-06-2024 - 19:16 | 12-04-2016 - 23:59 | |
| CVE-2018-9059 | 7.5 |
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious login request to forum.ghp. NOTE: this may overlap CVE-2014-3791.
|
03-10-2019 - 00:03 | 20-04-2018 - 21:29 | |
| CVE-2018-7600 | 7.5 |
Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.
|
01-03-2019 - 18:04 | 29-03-2018 - 07:29 | |
| CVE-2018-7747 | 3.5 |
Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) a greeting message, (2) the email transaction log,
|
17-07-2018 - 18:08 | 20-04-2018 - 21:29 | |
| CVE-2018-8880 | 5.0 |
Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP information, which leads to internal network information disclosure.
|
25-05-2018 - 15:39 | 23-04-2018 - 18:29 | |
| CVE-2018-8831 | 4.3 |
A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the context of the victim user's browser via a playlist.
|
22-05-2018 - 16:55 | 18-04-2018 - 17:29 | |
| CVE-2018-9857 | 4.3 |
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" screen).
|
09-05-2018 - 18:07 | 09-04-2018 - 07:29 | |
| CVE-2007-5099 | 7.5 |
PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
|
19-10-2017 - 01:30 | 26-09-2007 - 22:17 | |
| CVE-2010-2921 | 7.5 |
SQL injection vulnerability in the Golf Course Guide (com_golfcourseguide) component 0.9.6.0 beta and 1 beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a golfcourses action to index.php.
|
17-08-2017 - 01:32 | 30-07-2010 - 20:30 |