CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 104545 | CVE-2017-7725 | Candidate | concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored and allows for arbitrary domains to be set for certain links displayed to subsequent visitors, potentially an XSS vector. | Assigned (20170412) | None (candidate not yet proposed) | View | |
| 104544 | CVE-2017-7724 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170412) | None (candidate not yet proposed) | View | |
| 104543 | CVE-2017-7723 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170412) | None (candidate not yet proposed) | View | |
| 104542 | CVE-2017-7722 | Candidate | In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell. | Assigned (20170412) | None (candidate not yet proposed) | View | |
| 104541 | CVE-2017-7721 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170412) | None (candidate not yet proposed) | View |
Page 35 of 20943, showing 5 records out of 104715 total, starting on record 171, ending on 175
