CVE List

Id CVE No. Status Description Phase Votes Comments Actions
87609  CVE-2016-10108  Candidate  Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.  Assigned (20170103)  None (candidate not yet proposed)    View
87610  CVE-2016-10109  Candidate  Use-after-free vulnerability in pcsc-lite before 1.8.20 allows a remote attackers to cause denial of service (crash) via a command that uses "cardsList" after the handle has been released through the SCardReleaseContext function.  Assigned (20170103)  None (candidate not yet proposed)    View
87612  CVE-2016-10110  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170103)  None (candidate not yet proposed)    View
87613  CVE-2016-10111  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170103)  None (candidate not yet proposed)    View
87614  CVE-2016-10112  Candidate  Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.6.9 for WordPress allows remote authenticated administrators to inject arbitrary web script or HTML by providing crafted tax-rate table values in CSV format.  Assigned (20170103)  None (candidate not yet proposed)    View

Page 19748 of 20943, showing 5 records out of 104715 total, starting on record 98736, ending on 98740

Actions