NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
85928  CVE-2017-5214  The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value based on knowledge of a time value. This makes it easier to read arbitrary uploaded files.    Medium  2017-05-27  2017-05-26  View
85929  CVE-2017-5215  The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a safe file extension protection mechanism, leading to remote code execution.    7.5  High  2017-05-27  2017-05-26  View
86196  CVE-2017-9072  Two CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through 9.9.290 has XSS in iflateng.htm and nflateng.htm. CalendarXP PopCalendarXP through 9.8.308 has XSS in ipopeng.htm and npopeng.htm.    4.3  Medium  2017-05-27  2017-05-26  View
28342  CVE-2015-7974  NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."    2.1  Low  2017-05-27  2017-05-26  View
85944  CVE-2017-6025  A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A malicious user could overflow the stack buffer by providing overly long strings to functions that handle the XML. Because the function does not verify string size before copying to memory, the attacker may then be able to crash the application or run arbitrary code.    7.5  High  2017-05-27  2017-05-26  View

Page 1588 of 17672, showing 5 records out of 88360 total, starting on record 7936, ending on 7940

Actions