NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 86120 | CVE-2017-8899 | Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The primary cause is the ability to upload an SVG document with a crafted attribute such an onload; however, full path disclosure is required for exploitation. | 2 | 6.8 | Medium | 2017-05-27 | 2017-05-16 | View | |
| 86121 | CVE-2017-8900 | LightDM through 1.22.0, when systemd is used in Ubuntu 16.10 and 17.x, allows physically proximate attackers to bypass intended AppArmor restrictions and visit the home directories of arbitrary users by establishing a guest session. | 2 | 2.1 | Low | 2017-05-27 | 2017-05-26 | View | |
| 86125 | CVE-2017-8906 | An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as used by the x265_encoder_encode dependency in libbpg and other products. A small picture can cause an integer underflow, which leads to a Denial of Service in the process of encoding. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-20 | View | |
| 86126 | CVE-2017-8908 | The mark_line_tr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted PostScript document. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-22 | View | |
| 86127 | CVE-2017-8911 | An integer underflow has been identified in the unicode_to_utf8() function in tnef 1.4.14. This might lead to invalid write operations, controlled by an attacker. | 2 | 7.5 | High | 2017-05-27 | 2017-05-17 | View |
Page 1631 of 17672, showing 5 records out of 88360 total, starting on record 8151, ending on 8155
