CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 102900 | CVE-2017-6080 | Candidate | An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protection mechanism involving HTTP Access-Control headers. To exploit the vulnerability, an attacker can send cross-domain requests directly to the REST API for users with a valid session cookie and receive the result. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102899 | CVE-2017-6079 | Candidate | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102898 | CVE-2017-6078 | Candidate | FastStone MaxView 3.0 and 3.1 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with a crafted biSize field in the BITMAPINFOHEADER section. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102897 | CVE-2017-6077 | Candidate | ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ping_IPAddr field of an HTTP POST request. | Assigned (20170218) | None (candidate not yet proposed) | View | |
| 102896 | CVE-2017-6076 | Candidate | In versions of wolfSSL before 3.10.2 the function fp_mul_comba makes it easier to extract RSA key information for a malicious user who has access to view cache on a machine. | Assigned (20170217) | None (candidate not yet proposed) | View |
Page 364 of 20943, showing 5 records out of 104715 total, starting on record 1816, ending on 1820
