CVE List

Id CVE No. Status Description Phase Votes Comments Actions
103205  CVE-2017-6385  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170228)  None (candidate not yet proposed)    View
103204  CVE-2017-6384  Candidate  Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8.  Assigned (20170228)  None (candidate not yet proposed)    View
103203  CVE-2017-6383  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170228)  None (candidate not yet proposed)    View
103202  CVE-2017-6382  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170228)  None (candidate not yet proposed)    View
103201  CVE-2017-6381  Candidate  A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren"t normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren"t vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments  Assigned (20170228)  None (candidate not yet proposed)    View

Page 303 of 20943, showing 5 records out of 104715 total, starting on record 1511, ending on 1515

Actions