| Max CVSS | 7.5 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-5332 | 7.2 |
In the Linux kernel through 3.2, the rds_message_alloc_sgs() function does not validate a value that is used during DMA page allocation, leading to a heap-based out-of-bounds write (related to the rds_rdma_extra_size function in net/rds/rdma.c).
|
24-02-2023 - 18:43 | 11-01-2018 - 07:29 | |
| CVE-2018-5344 | 4.6 |
In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.
|
24-08-2020 - 17:37 | 12-01-2018 - 09:29 | |
| CVE-2018-5335 | 4.3 |
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/packet-wcp.c by validating the available buffer length.
|
12-03-2019 - 17:48 | 11-01-2018 - 21:29 | |
| CVE-2018-5336 | 5.0 |
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was addressed in epan/tvbparse.c by limiting the recursion depth.
|
12-03-2019 - 16:00 | 11-01-2018 - 21:29 | |
| CVE-2017-1478 | 2.1 |
IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 128613.
|
01-02-2018 - 21:06 | 11-01-2018 - 17:29 | |
| CVE-2017-16864 | 4.3 |
The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the orderby parameter.
|
31-01-2018 - 18:32 | 12-01-2018 - 14:29 | |
| CVE-2017-16862 | 4.3 |
The IncomingMailServers resource in Atlassian Jira before version 7.6.2 allows remote attackers to modify the "incoming mail" whitelist setting via a Cross-site request forgery (CSRF) vulnerability.
|
31-01-2018 - 18:08 | 12-01-2018 - 14:29 | |
| CVE-2017-1534 | 5.8 |
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnera
|
30-01-2018 - 19:15 | 10-01-2018 - 17:29 | |
| CVE-2018-1361 | 4.3 |
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a t
|
29-01-2018 - 19:09 | 11-01-2018 - 17:29 | |
| CVE-2004-2567 | 7.5 |
Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.
|
11-07-2017 - 01:32 | 31-12-2004 - 05:00 | |
| CVE-2004-2568 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in ReciPants 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.
|
08-03-2011 - 02:19 | 31-12-2004 - 05:00 |