| Max CVSS | 5.1 | Min CVSS | 1.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-1681 | 5.0 |
A vulnerability in the TFTP service of Cisco Network Convergence System 1000 Series software could allow an unauthenticated, remote attacker to retrieve arbitrary files from the targeted device, possibly resulting in information disclosure. The vulne
|
24-03-2023 - 17:47 | 21-02-2019 - 20:29 | |
| CVE-2014-7842 | 4.9 |
Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of service (guest OS crash) via a crafted application that performs an MMIO transaction or a PIO transaction to trigger a guest userspace e
|
13-02-2023 - 00:42 | 30-11-2014 - 01:59 | |
| CVE-2003-0086 | 1.2 |
The code for writing reg files in Samba before 2.2.8 allows local users to overwrite arbitrary files via a race condition involving chown.
|
19-10-2018 - 15:29 | 31-03-2003 - 05:00 | |
| CVE-2006-1134 | 5.1 |
SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to (1) post.php and possibly (2) process_post.php. Successful exploitation re
|
18-10-2018 - 16:30 | 10-03-2006 - 02:02 | |
| CVE-2008-6061 | 4.3 |
Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader
|
11-10-2018 - 20:56 | 05-02-2009 - 01:30 | |
| CVE-2014-8712 | 5.0 |
The build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 does not properly initialize a data structure, which allows remote attackers to cause a denial of se
|
05-01-2018 - 02:29 | 23-11-2014 - 02:59 | |
| CVE-2014-8711 | 5.0 |
Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allow remote attackers to cause a denial of service (application crash) via a crafted amqp_0_10 PDU in a pac
|
05-01-2018 - 02:29 | 23-11-2014 - 02:59 | |
| CVE-2014-8714 | 5.0 |
The dissect_write_structured_field function in epan/dissectors/packet-tn5250.c in the TN5250 dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (infinite loop) via a crafted pack
|
05-01-2018 - 02:29 | 23-11-2014 - 02:59 | |
| CVE-2014-8713 | 5.0 |
Stack-based buffer overflow in the build_expert_data function in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.2 allows remote attackers to cause a denial of service (application cra
|
05-01-2018 - 02:29 | 23-11-2014 - 02:59 | |
| CVE-2014-4830 | 4.3 |
IBM Security QRadar SIEM QRM 7.1 MR1 and QRM/QVM 7.2 MR2 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to thi
|
29-08-2017 - 01:35 | 19-10-2014 - 01:55 | |
| CVE-2015-1000004 | 4.3 |
XSS in filedownload v1.4 wordpress plugin
|
29-03-2017 - 01:59 | 06-10-2016 - 14:59 | |
| CVE-2014-3132 | 4.0 |
SAP Background Processing does not properly restrict access, which allows remote authenticated users to obtain sensitive information via an unspecified RFC function, related to SAP Solution Manager 7.1.
|
10-05-2014 - 04:06 | 30-04-2014 - 14:22 |