NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 87969 | CVE-2017-2847 | In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary shell characters during manual network configuration resulting in command injection. An attacker can simply send an HTTP request to the device to trigger this vulnerability. | 2 | 6.5 | Medium | 2017-07-18 | 2017-07-05 | View | |
| 88225 | CVE-2017-9789 | When under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26 would sometimes access memory after it has been freed, resulting in potentially erratic behaviour. | 2017-07-18 | 2017-07-17 | View | ||||
| 65954 | CVE-2005-0190 | Directory traversal vulnerability in RealPlayer 10.5 (6.0.12.1040) and earlier allows remote attackers to delete arbitrary files via a Real Metadata Packages (RMP) file with a FILENAME tag containing .. (dot dot) sequences in a filename that ends with a ? (question mark) and an allowed file extension (e.g. .mp3), which bypasses the check for the file extension. | 2 | 2.6 | Low | 2017-07-18 | 2017-07-10 | View | |
| 67234 | CVE-2005-1496 | The DBMS_Scheduler in Oracle 10g allows remote attackers with CREATE JOB privileges to gain additional privileges by changing SESSION_USER to the SYS user. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-10 | View | |
| 70818 | CVE-2004-0367 | Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View |
Page 1472 of 17672, showing 5 records out of 88360 total, starting on record 7356, ending on 7360
