NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
78905 | CVE-2001-1471 | prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-10 | View | |
79161 | CVE-2002-0145 | chuid 1.2 and earlier does not properly verify the ownership of files that will be changed, which allows remote attackers to change files owned by other users, such as root. | 2 | 7.5 | High | 2017-07-18 | 2017-07-10 | View | |
80697 | CVE-2002-1746 | Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
81465 | CVE-2017-3298 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). Supported versions that are affected are 8.54 and 8.55. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS v3.0 Base Score 6.1 (Confidentiality and Integrity impacts). | 2 | 5.8 | Medium | 2017-02-15 | 2017-02-10 | View | |
81977 | CVE-2015-7979 | NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by sending broadcast packets with invalid authentication to a broadcast client. | 2 | 5 | Medium | 2017-05-27 | 2017-05-26 | View |
Page 15941 of 17672, showing 5 records out of 88360 total, starting on record 79701, ending on 79705