NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
20573 | CVE-2016-5249 | Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly. | 2 | 7.2 | High | 2017-01-19 | 2016-07-01 | View | |
20574 | CVE-2016-5250 | Mozilla Firefox before 48.0 allows remote attackers to obtain sensitive information about the previously retrieved page via Resource Timing API calls. | 2 | 5 | Medium | 2017-01-19 | 2017-01-17 | View | |
20575 | CVE-2016-5251 | Mozilla Firefox before 48.0 allows remote attackers to spoof the location bar via crafted characters in the media type of a data: URL. | 2 | 4.3 | Medium | 2017-01-19 | 2016-11-28 | View | |
20576 | CVE-2016-5252 | Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations. | 2 | 6.8 | Medium | 2017-01-19 | 2016-11-28 | View | |
20577 | CVE-2016-5253 | The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link. | 2 | 4.7 | Medium | 2017-01-19 | 2016-11-28 | View |
Page 16082 of 17672, showing 5 records out of 88360 total, starting on record 80406, ending on 80410