CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 103264 | CVE-2017-6444 | Candidate | The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation. | Assigned (20170303) | None (candidate not yet proposed) | View | |
| 103265 | CVE-2017-6445 | Candidate | The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3 and 7.0.1 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely. | Assigned (20170303) | None (candidate not yet proposed) | View | |
| 103266 | CVE-2017-6446 | Candidate | XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters. | Assigned (20170303) | None (candidate not yet proposed) | View | |
| 103267 | CVE-2017-6447 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170303) | None (candidate not yet proposed) | View | |
| 103268 | CVE-2017-6448 | Candidate | The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file. | Assigned (20170303) | None (candidate not yet proposed) | View |
Page 20047 of 20943, showing 5 records out of 104715 total, starting on record 100231, ending on 100235
