| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-7574 | 7.5 |
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection feature is used to prevent unauthorized users from opening an XML protected project file,
|
10-02-2022 - 07:22 | 06-04-2017 - 21:59 | |
| CVE-2004-0330 | 10.0 |
Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.
|
28-07-2020 - 14:34 | 23-11-2004 - 05:00 | |
| CVE-2017-10038 | 4.0 |
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability al
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2017-0211 | 4.3 |
An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka "Windows OLE
|
03-10-2019 - 00:03 | 12-04-2017 - 14:59 | |
| CVE-2017-0210 | 4.3 |
An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Internet Explorer Eleva
|
03-10-2019 - 00:03 | 12-04-2017 - 14:59 | |
| CVE-2016-4320 | 4.0 |
Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource.
|
12-10-2018 - 18:28 | 10-04-2017 - 03:59 | |
| CVE-2008-2751 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in the Glassfish webadmin interface in Sun Java System Application Server 9.1_01 allow remote attackers to inject arbitrary web script or HTML via the (1) propertyForm:propertyContentPage:propertySh
|
11-10-2018 - 20:42 | 18-06-2008 - 19:41 | |
| CVE-2017-7592 | 6.8 |
The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
|
22-03-2018 - 01:29 | 09-04-2017 - 14:59 | |
| CVE-2017-7601 | 6.8 |
LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image.
|
22-03-2018 - 01:29 | 09-04-2017 - 14:59 | |
| CVE-2016-4318 | 3.5 |
Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.
|
16-02-2018 - 02:29 | 10-04-2017 - 03:59 | |
| CVE-2016-4317 | 3.5 |
Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.
|
16-02-2018 - 02:29 | 10-04-2017 - 03:59 | |
| CVE-2016-4319 | 6.8 |
Atlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.
|
16-02-2018 - 02:29 | 10-04-2017 - 03:59 | |
| CVE-2006-4458 | 6.4 |
Directory traversal vulnerability in calendar/inc/class.holidaycalc.inc.php in phpGroupWare 0.9.16.010 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the GLOBALS[phpgw_
|
19-10-2017 - 01:29 | 31-08-2006 - 10:04 | |
| CVE-2017-7584 | 6.8 |
Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a victim opens a specially crafted PDF file.
|
12-04-2017 - 01:59 | 07-04-2017 - 20:59 |