CVE List

Id CVE No. Status Description Phase Votes Comments Actions
104539  CVE-2017-7719  Candidate  SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or widget_Theme_functions.php, related to front_end/frontend_functions.php.  Assigned (20170412)  None (candidate not yet proposed)    View
104540  CVE-2017-7720  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170412)  None (candidate not yet proposed)    View
104541  CVE-2017-7721  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170412)  None (candidate not yet proposed)    View
104542  CVE-2017-7722  Candidate  In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell.  Assigned (20170412)  None (candidate not yet proposed)    View
104543  CVE-2017-7723  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20170412)  None (candidate not yet proposed)    View

Page 591 of 20943, showing 5 records out of 104715 total, starting on record 2951, ending on 2955

Actions