NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 9620 | CVE-2011-2900 | Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011. | 2 | 7.5 | High | 2017-01-07 | 2011-09-22 | View | |
| 75156 | CVE-1999-0488 | Internet Explorer 4.0 and 5.0 allows a remote attacker to execute security scripts in a different security context using malicious URLs, a variant of the "cross frame" vulnerability. | 2 | 7.5 | High | 2017-01-05 | 2008-09-09 | View | |
| 75668 | CVE-1999-1018 | IPChains in Linux kernels 2.2.10 and earlier does not reassemble IP fragments before checking the header information, which allows a remote attacker to bypass the filtering rules using several fragments with 0 offsets. | 2 | 7.5 | High | 2017-01-05 | 2016-10-17 | View | |
| 10900 | CVE-2011-4503 | The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. | 2 | 7.5 | High | 2017-01-07 | 2013-01-24 | View | |
| 76948 | CVE-2000-0707 | PCCS MySQLDatabase Admin Tool Manager 1.2.4 and earlier installs the file dbconnect.inc within the web root, which allows remote attackers to obtain sensitive information such as the administrative password. | 2 | 7.5 | High | 2017-01-05 | 2008-09-05 | View |
Page 14482 of 17672, showing 5 records out of 88360 total, starting on record 72406, ending on 72410
