NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 87636 | CVE-2017-10679 | Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed. | 2 | 5 | Medium | 2017-07-18 | 2017-07-05 | View | |
| 87640 | CVE-2017-10683 | In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted input will lead to a remote denial of service attack. | 2 | 5 | Medium | 2017-07-18 | 2017-07-05 | View | |
| 87388 | CVE-2017-7524 | tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC. | 2 | 5 | Medium | 2017-07-18 | 2017-07-05 | View | |
| 87644 | CVE-2017-10687 | In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted input will lead to a remote denial of service attack. | 2 | 5 | Medium | 2017-07-18 | 2017-07-05 | View | |
| 87389 | CVE-2017-9145 | TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-05 | View |
Page 16358 of 17672, showing 5 records out of 88360 total, starting on record 81786, ending on 81790
