NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
86060 | CVE-2017-8310 | Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data beyond allocated memory and potentially crash the process (causing a denial of service) via a crafted subtitles file. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-10 | View | |
86572 | CVE-2017-1000367 | Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process_ttyname() function resulting in information disclosure and command execution. | 2 | 6.9 | Medium | 2017-06-12 | 2017-06-09 | View | |
86828 | CVE-2016-7801 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors. | 2 | 4 | Medium | 2017-06-18 | 2017-06-13 | View | |
87084 | CVE-2017-9097 | In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a path traversal technique, as demonstrated by reading the password file, or using the template parameter to cgi-bin/write.cgi to write to an arbitrary file. | 2 | 6.4 | Medium | 2017-07-18 | 2017-07-05 | View | |
87340 | CVE-2017-9782 | JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec.c. | 2 | 4.3 | Medium | 2017-06-28 | 2017-06-27 | View |
Page 15844 of 17672, showing 5 records out of 88360 total, starting on record 79216, ending on 79220