NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
21640 | CVE-2016-7094 | Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update. | 2 | 1.5 | Low | 2017-01-19 | 2017-01-06 | View | |
21641 | CVE-2016-7095 | Exponent CMS before 2.3.9 is vulnerable to an attacker uploading a malicious script file using redirection to place the script in an unprotected folder, one allowing script execution. | 2 | 7.5 | High | 2017-01-19 | 2016-11-28 | View | |
21642 | CVE-2016-7097 | The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. | 2 | 3.6 | Low | 2017-07-18 | 2017-07-10 | View | |
21643 | CVE-2016-7098 | Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP connection open. | 2 | 6.8 | Medium | 2017-01-19 | 2017-01-06 | View | |
21644 | CVE-2016-7099 | The tls.checkServerIdentity function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 does not properly handle wildcards in name fields of X.509 certificates, which allows man-in-the-middle attackers to spoof servers via a crafted certificate. | 2 | 4.3 | Medium | 2017-01-19 | 2016-10-12 | View |
Page 16352 of 17672, showing 5 records out of 88360 total, starting on record 81756, ending on 81760