| Max CVSS | 10.0 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-6974 | 6.8 |
In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.
|
16-05-2023 - 11:14 | 15-02-2019 - 15:29 | |
| CVE-2017-7269 | 10.0 |
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://
|
03-07-2019 - 17:25 | 27-03-2017 - 02:59 | |
| CVE-2014-9273 | 4.6 |
lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive files, which triggers an out-of-bounds read or write.
|
30-10-2018 - 16:27 | 08-12-2014 - 16:59 | |
| CVE-2003-1549 | 4.3 |
Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the ma_kw parameter.
|
19-10-2018 - 15:29 | 31-12-2003 - 05:00 | |
| CVE-2006-1289 | 7.5 |
Multiple SQL injection vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, (3) team, (4) level, (5) status, (6) teamname, and (7) teamlead parameters i
|
18-10-2018 - 16:31 | 19-03-2006 - 23:02 | |
| CVE-2006-1290 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Milkeyway Captive Portal 0.1 and 0.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) ipAddress, (2) act, (3) username, and (4) unspecified other parameters in (a) auth
|
18-10-2018 - 16:31 | 19-03-2006 - 23:02 | |
| CVE-2014-9175 | 7.5 |
SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the table_id parameter in a get_wdtable action to wp-admin/admin-ajax.php.
|
08-09-2017 - 01:29 | 02-12-2014 - 16:59 | |
| CVE-2009-4216 | 9.3 |
Directory traversal vulnerability in funzioni/lib/menulast.php in klinza professional cms 5.0.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the LANG parameter.
|
17-08-2017 - 01:31 | 07-12-2009 - 17:30 |