NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
15364  CVE-2010-4046  Opera before 10.63 does not properly verify the origin of video content, which allows remote attackers to obtain sensitive information by using a video stream as HTML5 canvas content.    4.3  Medium  2017-01-18  2014-11-13  View
80900  CVE-2002-1949  The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password.    Medium  2017-01-05  2008-09-05  View
81156  CVE-2002-2205  Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.    Medium  2017-01-05  2008-09-05  View
15876  CVE-2010-4629  MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php.    Medium  2017-01-18  2011-01-11  View
81668  CVE-2017-5598  An issue was discovered in eClinicalWorks healow@work 8.0 build 8. This is a blind SQL injection within the EmployeePortalServlet, which can be exploited by un-authenticated users via an HTTP POST request and which can be used to dump database data out to a malicious server, using an out-of-band technique, such as select_loadfile(). The vulnerability affects the EmployeePortalServlet page and the following parameter: employer.    Medium  2017-02-07  2017-01-31  View

Page 161 of 17672, showing 5 records out of 88360 total, starting on record 801, ending on 805

Actions