NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 83741 | CVE-2017-5623 | An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' in contradiction to the threat model of Android where the bootloader MUST NOT allow any security-sensitive operation to be run unless the bootloader is unlocked. | 2 | 7.2 | High | 2017-03-29 | 2017-03-24 | View | |
| 83997 | CVE-2016-9167 | NDSD in Novell eDirectory before 9.0.2 did not calculate ACLs on LDAP objects across partition boundaries correctly, which could lead to a privilege escalation by modifying user attributes that would otherwise be filtered by an ACL. | 2 | 5 | Medium | 2017-03-29 | 2017-03-27 | View | |
| 16670 | CVE-2016-0162 | Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability." | 2 | 4.3 | Medium | 2017-03-29 | 2017-03-23 | View | |
| 83486 | CVE-2017-6905 | An issue was discovered in concrete5 <= 5.6.3.4. The vulnerability exists due to insufficient filtration of user-supplied data (disable_choose) passed to the concrete5-legacy-master/web/concrete/tools/files/search_dialog.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website. | 2 | 4.3 | Medium | 2017-03-29 | 2017-03-23 | View | |
| 83742 | CVE-2017-5644 | Apache POI in versions prior to release 3.15 allows remote attackers to cause a denial of service (CPU consumption) via a specially crafted OOXML file, aka an XML Entity Expansion (XEE) attack. | 2 | 7.1 | High | 2017-03-29 | 2017-03-28 | View |
Page 15724 of 17672, showing 5 records out of 88360 total, starting on record 78616, ending on 78620
