NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
15364 | CVE-2010-4046 | Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content. | 2 | 4.3 | Medium | 2017-01-18 | 2014-11-13 | View | |
80900 | CVE-2002-1949 | The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password. | 2 | 5 | Medium | 2017-01-05 | 2008-09-05 | View | |
81156 | CVE-2002-2205 | Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname. | 2 | 5 | Medium | 2017-01-05 | 2008-09-05 | View | |
15876 | CVE-2010-4629 | MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php. | 2 | 5 | Medium | 2017-01-18 | 2011-01-11 | View | |
81668 | CVE-2017-5598 | An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects the EmployeePortalServlet page and the following parameter: employer. | 2 | 5 | Medium | 2017-02-07 | 2017-01-31 | View |
Page 161 of 17672, showing 5 records out of 88360 total, starting on record 801, ending on 805