NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
88305  CVE-2016-4982  authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race condition between the creation of the key, and the chmod to protect it.          2017-07-18  2017-07-17  View
88304  CVE-2016-4000  Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.    2  7.5  High  2017-07-18  2017-07-17  View
88303  CVE-2016-10398  Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE) are protected by a weak challenge. This allows adversaries to replay previously captured responses and use the TEE without authenticating. All apps using authentication-gated cryptography are vulnerable to this attack, which was confirmed on the LG Nexus 5X.          2017-07-18  2017-07-17  View
88302  CVE-2016-10397  In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.example.com:80#@good.example.com/ and evil.example.com:80?@good.example.com/ inputs to the parse_url function (implemented in the php_url_parse_ex function in ext/standard/url.c).    2  5  Medium  2017-07-18  2017-07-17  View
88301  CVE-2016-0764  Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.          2017-07-18  2017-07-17  View

Page 12 of 17672, showing 5 records out of 88360 total, starting on record 56, ending on 60

<<first 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 last>>

Actions