NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 86651 | CVE-2017-8837 | Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. The files in question are /etc/waipass and /etc/roapass. In case one of these devices is compromised, the attacker can gain access to passwords and abuse them to compromise further systems. | 2 | 5 | Medium | 2017-06-17 | 2017-06-13 | View | |
| 86654 | CVE-2017-8840 | Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2_710hw3_1350hw2_2500-7.0.1-build2093. A direct request to cgi-bin/HASync/hasync.cgi?debug=1 shows Master LAN Address, Serial Number, HA Group ID, Virtual IP, and Submitted syncid. | 2 | 5 | Medium | 2017-06-17 | 2017-06-13 | View | |
| 86657 | CVE-2017-8920 | irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS. | 2 | 4.3 | Medium | 2017-06-17 | 2017-06-13 | View | |
| 87171 | CVE-2015-3220 | The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash). | 2017-06-18 | 2017-06-13 | View | ||||
| 86676 | CVE-2017-9430 | Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a command line with a long name argument that is mishandled in a strcpy call for argv[0]. An example threat model is a web application that launches dnstracer with an untrusted name string. | 2 | 7.5 | High | 2017-06-17 | 2017-06-13 | View |
Page 1484 of 17672, showing 5 records out of 88360 total, starting on record 7416, ending on 7420
