| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-18344 | 2.1 |
The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID
|
15-10-2020 - 13:28 | 26-07-2018 - 19:29 | |
| CVE-2009-1781 | 7.5 |
Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpre_config.php via the form_aula parameter.
|
20-05-2020 - 16:49 | 22-05-2009 - 20:30 | |
| CVE-2009-1780 | 7.5 |
admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.
|
20-05-2020 - 16:49 | 22-05-2009 - 20:30 | |
| CVE-2009-1779 | 7.5 |
PHP remote file inclusion vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the form_include_template parameter.
|
20-05-2020 - 16:48 | 22-05-2009 - 20:30 | |
| CVE-2012-2580 | 4.3 |
Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web script or HTML via the From field of an email.
|
10-01-2020 - 16:54 | 20-06-2014 - 14:55 | |
| CVE-2011-2407 | 6.4 |
Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors.
|
09-10-2019 - 23:03 | 11-08-2011 - 22:55 | |
| CVE-2005-2337 | 7.5 |
Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).
|
11-10-2017 - 01:30 | 07-10-2005 - 23:02 | |
| CVE-2013-5892 | 3.5 |
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors relat
|
29-08-2017 - 01:33 | 15-01-2014 - 16:08 | |
| CVE-2007-3824 | 10.0 |
SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands via the katID parameter.
|
29-07-2017 - 01:32 | 17-07-2007 - 01:30 | |
| CVE-2016-7592 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.2 is affected. Safari before 10.0.2 is affected. iCloud before 6.1 is affected. iTunes before 12.5.4 is affected. The issue involves the "WebKit" component, which allows remote attacker
|
27-07-2017 - 01:29 | 20-02-2017 - 08:59 | |
| CVE-2002-1782 | 2.1 |
The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.
|
11-07-2017 - 01:29 | 31-12-2002 - 05:00 | |
| CVE-2011-2406 | 3.5 |
Cross-site scripting (XSS) vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
|
18-03-2015 - 01:59 | 11-08-2011 - 22:55 |