NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
84668 | CVE-2017-5045 | XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page. | 2 | 4.3 | Medium | 2017-07-18 | 2017-06-30 | View | |
84924 | CVE-2017-7691 | A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592. | 2 | 7.5 | High | 2017-04-27 | 2017-04-17 | View | |
85436 | CVE-2017-4983 | EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-07 | View | |
85692 | CVE-2017-0242 | An information disclosure vulnerability exists in the way some ActiveX objects are instantiated, aka Microsoft ActiveX Information Disclosure Vulnerability. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-23 | View | |
85948 | CVE-2017-6079 | The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such as specific iptables routes, etc., to be set. You can use this page as a web shell essentially to execute commands, though you get no feedback client-side from the web application: if the command is valid, it executes. An example is the wget command. The page that allows this has been confirmed in firmware as old as 2006. | 2 | 10 | High | 2017-05-27 | 2017-05-25 | View |
Page 1678 of 17672, showing 5 records out of 88360 total, starting on record 8386, ending on 8390