CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 103259 | CVE-2017-6439 | Candidate | Heap-based buffer overflow in the parse_string_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (out-of-bounds write) via a crafted plist file. | Assigned (20170302) | None (candidate not yet proposed) | View | |
| 103260 | CVE-2017-6440 | Candidate | The parse_data_node function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service (memory allocation error) via a crafted plist file. | Assigned (20170302) | None (candidate not yet proposed) | View | |
| 103261 | CVE-2017-6441 | Candidate | ** DISPUTED ** The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted use of "declare(ticks=" in a PHP script. NOTE: the vendor disputes the classification of this as a vulnerability, stating "Please do not request CVEs for ordinary bugs. CVEs are relevant for security issues only." | Assigned (20170302) | None (candidate not yet proposed) | View | |
| 103262 | CVE-2017-6442 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170302) | None (candidate not yet proposed) | View | |
| 103263 | CVE-2017-6443 | Candidate | Cross-site scripting (XSS) vulnerability in EPSON TMNet WebConfig 1.00 allows remote attackers to inject arbitrary web script or HTML via the W_AD1 parameter to Forms/oadmin_1. | Assigned (20170303) | None (candidate not yet proposed) | View |
Page 20046 of 20943, showing 5 records out of 104715 total, starting on record 100226, ending on 100230
