NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
20228 | CVE-2016-4618 | Cross-site scripting (XSS) vulnerability in Safari Reader in Apple iOS before 10 and Safari before 10 allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)." | 2 | 4.3 | Medium | 2017-01-19 | 2016-11-28 | View | |
20484 | CVE-2016-5145 | Blink, as used in Google Chrome before 52.0.2743.116, does not ensure that a taint property is preserved after a structure-clone operation on an ImageBitmap object derived from a cross-origin image, which allows remote attackers to bypass the Same Origin Policy via crafted JavaScript code. | 2 | 6.8 | Medium | 2017-01-19 | 2016-11-28 | View | |
86020 | CVE-2017-7472 | The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring calls. | 2 | 4.9 | Medium | 2017-07-18 | 2017-07-07 | View | |
20740 | CVE-2016-5495 | Unspecified vulnerability in the Oracle Discoverer component in Oracle Fusion Middleware 11.1.1.7.0 allows remote attackers to affect confidentiality via vectors related to EUL Code & Schema. | 2 | 5 | Medium | 2017-01-19 | 2016-11-28 | View | |
20996 | CVE-2016-5945 | IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to upload non-executable files via a crafted HTTP request. | 2 | 4 | Medium | 2017-01-19 | 2016-11-28 | View |
Page 165 of 17672, showing 5 records out of 88360 total, starting on record 821, ending on 825