| Max CVSS | 10.0 | Min CVSS | 4.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-11317 | 7.5 |
Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
|
20-10-2020 - 22:15 | 23-08-2017 - 17:29 | |
| CVE-2017-9248 | 7.5 |
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to de
|
03-10-2019 - 00:03 | 03-07-2017 - 19:29 | |
| CVE-2018-2698 | 4.1 |
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon
|
03-10-2019 - 00:03 | 18-01-2018 - 02:29 | |
| CVE-2017-17562 | 6.8 |
Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler fu
|
20-04-2018 - 01:29 | 12-12-2017 - 19:29 | |
| CVE-2017-7310 | 6.8 |
A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy before 10.6, DupScout before 10.6, and VX Search before 10.6 allows attackers to execute arbitr
|
08-03-2018 - 02:29 | 29-03-2017 - 21:59 | |
| CVE-2018-6015 | 5.0 |
An issue was discovered in the "Email Subscribers & Newsletters" plugin before 3.4.8 for WordPress. Sending an HTTP POST request to a URI with /?es=export at the end, and adding option=view_all_subscribers in the body, allows downloading of a CSV dat
|
12-02-2018 - 18:45 | 26-01-2018 - 20:29 | |
| CVE-2018-5997 | 10.0 |
An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code ex
|
12-02-2018 - 15:36 | 25-01-2018 - 17:29 | |
| CVE-2018-5973 | 7.5 |
SQL Injection exists in Professional Local Directory Script 1.0 via the sellers_subcategories.php IndustryID parameter, or the suppliers.php IndustryID or CategoryID parameter.
|
09-02-2018 - 18:08 | 25-01-2018 - 17:29 | |
| CVE-2017-11357 | 7.5 |
Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
|
28-01-2018 - 02:29 | 23-08-2017 - 17:29 | |
| CVE-2017-14143 | 7.5 |
The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass an intended protection mechanism and consequently conduct PHP object injection attacks and e
|
27-01-2018 - 02:29 | 19-09-2017 - 15:29 | |
| CVE-2007-4834 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/.
|
29-09-2017 - 01:29 | 12-09-2007 - 19:17 |