| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-5546 | 7.2 |
The freelist-randomization feature in mm/slab.c in the Linux kernel 4.8.x and 4.9.x before 4.9.5 allows local users to cause a denial of service (duplicate freelist entries and system crash) or possibly have unspecified other impact in opportunistic
|
28-02-2023 - 15:45 | 06-02-2017 - 06:59 | |
| CVE-2003-0987 | 7.5 |
mod_digest for Apache before 1.3.31 does not properly verify the nonce of a client response by using a AuthNonce secret.
|
06-06-2021 - 11:15 | 03-03-2004 - 05:00 | |
| CVE-2017-5548 | 7.2 |
drivers/net/ieee802154/atusb.c in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified othe
|
03-10-2019 - 00:03 | 06-02-2017 - 06:59 | |
| CVE-2017-5551 | 3.6 |
The simple_set_acl function in fs/posix_acl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid pro
|
03-10-2019 - 00:03 | 06-02-2017 - 06:59 | |
| CVE-2017-1000096 | 6.5 |
Arbitrary code execution due to incomplete sandbox protection: Constructors, instance variable initializers, and instance initializers in Pipeline scripts were not subject to sandbox protection, and could therefore execute arbitrary code. This could
|
03-10-2019 - 00:03 | 05-10-2017 - 01:29 | |
| CVE-2004-1082 | 7.5 |
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
|
30-10-2018 - 16:25 | 03-02-2004 - 05:00 | |
| CVE-2017-5549 | 2.1 |
The klsi_105_get_line_state function in drivers/usb/serial/kl5kusb105.c in the Linux kernel before 4.9.5 places uninitialized heap-memory contents into a log entry upon a failure to read the line status, which allows local users to obtain sensitive i
|
24-08-2018 - 10:29 | 06-02-2017 - 06:59 | |
| CVE-2016-8214 | 4.6 |
EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3.0 and 7.3.1 contain a vulnerability that may allow malicious administrators to compromise Avamar servers.
|
11-02-2017 - 02:59 | 25-01-2017 - 11:59 | |
| CVE-2016-8215 | 4.3 |
EMC RSA Security Analytics 10.5.3 and 10.6.2 contains fixes for a Reflected Cross-Site Scripting vulnerability that could potentially be exploited by malicious users to compromise the affected system.
|
11-02-2017 - 02:59 | 25-01-2017 - 11:59 | |
| CVE-2016-10154 | 4.9 |
The smbhash function in fs/cifs/smbencrypt.c in the Linux kernel 4.9.x before 4.9.1 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have un
|
09-02-2017 - 21:55 | 06-02-2017 - 06:59 | |
| CVE-2017-5550 | 2.1 |
Off-by-one error in the pipe_advance function in lib/iov_iter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized heap-memory locations in opportunistic circumstances by reading from a pipe after a
|
09-02-2017 - 19:15 | 06-02-2017 - 06:59 | |
| CVE-2016-10153 | 7.2 |
The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other im
|
09-02-2017 - 14:57 | 06-02-2017 - 06:59 | |
| CVE-2014-6240 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Google Sitemap (weeaar_googlesitemap) extension 0.4.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
11-09-2014 - 17:06 | 11-09-2014 - 14:16 |