CVE List

Id CVE No. Status Description Phase Votes Comments Actions
103375  CVE-2017-6555  Candidate  Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description parameter (aka "Design Manager > Categories > Category Description").  Assigned (20170309)  None (candidate not yet proposed)    View
103374  CVE-2017-6554  Candidate  pmmasterd in Quest Privilege Manager 6.0.0-27 and 6.0.0-50 allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.  Assigned (20170308)  None (candidate not yet proposed)    View
103373  CVE-2017-6553  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170308)  None (candidate not yet proposed)    View
103372  CVE-2017-6552  Candidate  Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for telephone, Internet, and TV services.  Assigned (20170308)  None (candidate not yet proposed)    View
103371  CVE-2017-6551  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170308)  None (candidate not yet proposed)    View

Page 269 of 20943, showing 5 records out of 104715 total, starting on record 1341, ending on 1345

Actions