NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
15874  CVE-2010-4627  Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.    6.8  Medium  2017-01-18  2011-01-11  View
16130  CVE-2010-4895  Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE: some of these details are obtained from third party information.    4.3  Medium  2017-01-18  2012-02-13  View
16386  CVE-2010-5177  ** DISPUTED ** Race condition in Sophos Endpoint Security and Control 9.0.5 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: the vendor disputes this issue because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute.    6.2  Medium  2017-01-18  2012-08-27  View
81922  CVE-2016-8967  IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user.    2.1  Low  2017-02-15  2017-02-09  View
16642  CVE-2016-0132  Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."    10  High  2017-01-19  2016-12-02  View

Page 142 of 17672, showing 5 records out of 88360 total, starting on record 706, ending on 710

Actions