| Max CVSS | 9.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-0363 | 5.8 |
The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows man-in-the-middle attackers to spoof servers and o
|
23-02-2021 - 16:12 | 30-04-2014 - 10:49 | |
| CVE-2016-7468 | 4.3 |
An unauthenticated remote attacker may be able to disrupt services on F5 BIG-IP 11.4.1 - 11.5.4 devices with maliciously crafted network traffic. This vulnerability affects virtual servers associated with TCP profiles when the BIG-IP system's tm.tcpp
|
06-06-2019 - 15:11 | 23-03-2017 - 14:59 | |
| CVE-2014-8600 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in KDE-Runtime 4.14.3 and earlier, kwebkitpart 1.3.4 and earlier, and kio-extras 5.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via a crafted URI using the (1) zip,
|
30-10-2018 - 16:27 | 08-12-2014 - 11:59 | |
| CVE-2006-1264 | 4.3 |
Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag.
|
18-10-2018 - 16:31 | 19-03-2006 - 02:02 | |
| CVE-2014-8387 | 9.0 |
cgi/utility.cgi in Advantech EKI-6340 2.05 Wi-Fi Mesh Access Point allows remote authenticated users to execute arbitrary commands via shell metacharacters in the pinghost parameter to ping.cgi.
|
09-10-2018 - 19:53 | 20-11-2014 - 13:55 | |
| CVE-2003-0130 | 5.0 |
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded
|
11-10-2017 - 01:29 | 24-03-2003 - 05:00 | |
| CVE-2014-9738 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the Tournament module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via an (1) account username, a (2) node ti
|
08-07-2015 - 15:01 | 06-07-2015 - 15:59 |