NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 87244 | CVE-2017-1304 | IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing of an unsupported configuration, where users applications are running on an active ESS I/O server node and utilize direct I/O to perform a read or a write to a Spectrum Scale file. This vulnerability may result in the use of an incorrect memory address, leading to a Spectrum Scale/GPFS daemon failure with a Signal 11, and possibly leading to denial of service or undetected data corruption. IBM X-Force ID: 125458. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-06 | View | |
| 88013 | CVE-2017-6032 | A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it susceptible to brute-force attacks. | 2 | 5 | Medium | 2017-07-18 | 2017-07-06 | View | |
| 88014 | CVE-2017-6034 | An Authentication Bypass by Capture-Replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run, stop, upload, and download. | 2 | 7.5 | High | 2017-07-18 | 2017-07-06 | View | |
| 86993 | CVE-2017-7884 | In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by replacing the service executable apcupsd.exe with a malicious executable that will run with SYSTEM privileges at startup. This occurs because of RW NT AUTHORITYAuthenticated Users permissions for %SYSTEMDRIVE%apcupsdinapcupsd.exe. | 2 | 7.2 | High | 2017-07-18 | 2017-07-06 | View | |
| 88019 | CVE-2017-6042 | A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all versions prior to 4.0.14, and AirLink Raven XT, all versions prior to 4.0.11. Affected devices do not verify if a request was intentionally sent by the logged-in user, which may allow an attacker to trick a client into making an unintentional request to the web server that will be treated as an authentic request. | 2 | 6.8 | Medium | 2017-07-18 | 2017-07-06 | View |
Page 16381 of 17672, showing 5 records out of 88360 total, starting on record 81901, ending on 81905
