| Max CVSS | 9.3 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-2130 | 6.8 |
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
|
09-09-2021 - 17:47 | 28-04-2017 - 16:59 | |
| CVE-2014-9059 | 4.3 |
lib/setup.php in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 does not provide charset information in HTTP headers, which might allow remote attackers to conduct cross-site scripting (XSS) attacks via UTF-7 ch
|
01-12-2020 - 14:54 | 24-11-2014 - 11:59 | |
| CVE-2014-4452 | 5.4 |
WebKit, as used in Apple iOS before 8.1.1 and Apple TV before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2
|
16-07-2019 - 12:22 | 18-11-2014 - 11:59 | |
| CVE-2014-4461 | 9.3 |
The kernel in Apple iOS before 8.1.1 and Apple TV before 7.0.2 does not properly validate IOSharedDataQueue object metadata, which allows attackers to execute arbitrary code in a privileged context via a crafted application. Per an <a href="http://su
|
08-03-2019 - 16:06 | 18-11-2014 - 11:59 | |
| CVE-2019-5727 | 3.5 |
Splunk Web in Splunk Enterprise 6.5.x before 6.5.5, 6.4.x before 6.4.9, 6.3.x before 6.3.12, 6.2.x before 6.2.14, 6.1.x before 6.1.14, and 6.0.x before 6.0.15 and Splunk Light before 6.6.0 has Persistent XSS, aka SPL-138827.
|
22-02-2019 - 13:49 | 21-02-2019 - 01:29 | |
| CVE-2014-3124 | 6.7 |
The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by leveraging a separate qemu-dm vulnerability to trigger invalid page ta
|
30-10-2018 - 16:26 | 07-05-2014 - 10:55 | |
| CVE-2003-0138 | 7.5 |
Version 4 of the Kerberos protocol (krb4), as used in Heimdal and other packages, allows an attacker to impersonate any principal in a realm via a chosen-plaintext attack.
|
19-10-2018 - 15:29 | 24-03-2003 - 05:00 | |
| CVE-2006-1182 | 2.6 |
Adobe Graphics Server 2.0 and 2.1 (formerly AlterCast) and Adobe Document Server (ADS) 5.0 and 6.0 allows local users to read files with certain extensions or overwrite arbitrary files and execute code via a crafted SOAP request to the AlterCast web
|
18-10-2018 - 16:31 | 16-03-2006 - 01:02 | |
| CVE-2014-8539 | 4.3 |
Cross-site scripting (XSS) vulnerability in Simple Email Form 1.8.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the mod_simpleemailform_field2_1 parameter to index.php.
|
09-10-2018 - 19:54 | 21-11-2014 - 15:59 | |
| CVE-2014-4451 | 7.2 |
Apple iOS before 8.1.1 does not properly enforce the failed-passcode limit, which makes it easier for physically proximate attackers to bypass the lock-screen protection mechanism via a series of guesses.
|
29-08-2017 - 01:35 | 18-11-2014 - 11:59 | |
| CVE-2014-4453 | 5.0 |
Apple iOS before 8.1.1 and OS X before 10.10.1 include location data during establishment of a Spotlight Suggestions server connection by Spotlight or Safari, which might allow remote attackers to obtain sensitive information via unspecified vectors.
|
29-08-2017 - 01:35 | 18-11-2014 - 11:59 | |
| CVE-2014-4458 | 5.0 |
The "System Profiler About This Mac" component in Apple OS X before 10.10.1 includes extraneous cookie data in system-model requests, which might allow remote attackers to obtain sensitive information via unspecified vectors.
|
29-08-2017 - 01:35 | 18-11-2014 - 11:59 | |
| CVE-2014-4460 | 2.1 |
CFNetwork in Apple iOS before 8.1.1 and OS X before 10.10.1 does not properly clear the browsing cache upon a transition out of private-browsing mode, which makes it easier for physically proximate attackers to obtain sensitive information by reading
|
29-08-2017 - 01:35 | 18-11-2014 - 11:59 |