CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 104041 | CVE-2017-7221 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170321) | None (candidate not yet proposed) | View | |
| 104042 | CVE-2017-7222 | Candidate | A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript (if MantisBT"s CSP settings permit it) by modifying "window_title" in the application configuration. This requires privileged access to MantisBT configuration management pages (i.e., administrator access rights) or altering the system configuration file (config_inc.php). | Assigned (20170322) | None (candidate not yet proposed) | View | |
| 104043 | CVE-2017-7223 | Candidate | GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a program crash. | Assigned (20170322) | None (candidate not yet proposed) | View | |
| 104044 | CVE-2017-7224 | Candidate | The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash. | Assigned (20170322) | None (candidate not yet proposed) | View | |
| 104045 | CVE-2017-7225 | Candidate | The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash. | Assigned (20170322) | None (candidate not yet proposed) | View |
Page 20809 of 20943, showing 5 records out of 104715 total, starting on record 104041, ending on 104045
