NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
87453 | CVE-2015-1778 | The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination. | 2017-06-28 | 2017-06-27 | View | ||||
87709 | CVE-2017-10789 | The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a your communication with the server will be encrypted statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-12 | View | |
87965 | CVE-2017-2820 | An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0. A specially crafted PDF file can lead to an integer overflow causing out of bounds memory overwrite on the heap resulting in potential arbitrary code execution. To trigger this vulnerability, a victim must open the malicious PDF in an application using this library. | 2 | 6.8 | Medium | 2017-07-18 | 2017-07-17 | View | |
88221 | CVE-2017-9669 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file. | 2017-07-18 | 2017-07-17 | View | ||||
65950 | CVE-2005-0186 | Cisco IOS 12.1YD, 12.2T, 12.3 and 12.3T, when configured for the IOS Telephony Service (ITS), CallManager Express (CME) or Survivable Remote Site Telephony (SRST), allows remote attackers to cause a denial of service (device reboot) via a malformed packet to the SCCP port. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View |
Page 16691 of 17672, showing 5 records out of 88360 total, starting on record 83451, ending on 83455