NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 81657 | CVE-2017-5570 | An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the messageJson.jsp, which can only be exploited by authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile(). | 2 | 6.5 | Medium | 2017-02-07 | 2017-01-26 | View | |
| 81660 | CVE-2017-5574 | SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary SQL commands via the activation parameter. | 2 | 7.5 | High | 2017-02-07 | 2017-01-26 | View | |
| 81661 | CVE-2017-5575 | SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the modules parameter. | 2 | 7.5 | High | 2017-02-07 | 2017-01-26 | View | |
| 81664 | CVE-2017-5594 | An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01. | 2 | 4.3 | Medium | 2017-02-07 | 2017-01-27 | View | |
| 81666 | CVE-2017-5596 | In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-asterix.c by changing a data type to avoid an integer overflow. | 2 | 5 | Medium | 2017-02-07 | 2017-01-27 | View |
Page 15313 of 17672, showing 5 records out of 88360 total, starting on record 76561, ending on 76565
