NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
84434 | CVE-2017-3125 | An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security context of the browser of a victim logged in FortiMail, assuming the victim is social engineered into clicking an URL crafted by the attacker. | 2 | 4.3 | Medium | 2017-04-27 | 2017-04-18 | View | |
84690 | CVE-2017-5645 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. | 2 | 7.5 | High | 2017-04-27 | 2017-04-24 | View | |
84946 | CVE-2017-7745 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-sigcomp.c by correcting a memory-size check. | 2 | 7.8 | High | 2017-04-27 | 2017-04-18 | View | |
85202 | CVE-2016-7526 | coders/wpg.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file. | 2 | 4.3 | Medium | 2017-04-27 | 2017-04-24 | View | |
84947 | CVE-2017-7746 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-slsk.c by adding checks for the remaining length. | 2 | 7.8 | High | 2017-04-27 | 2017-04-18 | View |
Page 15903 of 17672, showing 5 records out of 88360 total, starting on record 79511, ending on 79515