NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 83193 | CVE-2017-5231 | All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function. By using a specially-crafted build of Meterpreter, it is possible to write to an arbitrary directory on the Metasploit console with the permissions of the running Metasploit instance. | 2 | 5.1 | Medium | 2017-03-29 | 2017-03-20 | View | |
| 17913 | CVE-2016-1515 | A use-after-free / double-free vulnerability can occur in libebml master branch while parsing Track elements of the MKV container. | 2 | 5 | Medium | 2017-01-19 | 2017-01-10 | View | |
| 18169 | CVE-2016-1821 | IOAudioFamily in Apple OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (NULL pointer dereference) via a crafted app. | 2 | 9.3 | High | 2017-01-19 | 2016-12-02 | View | |
| 83705 | CVE-2017-3849 | A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software (possibly 3.7 through 3.18, and 16) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to incomplete input validation on certain crafted packets. An attacker could exploit this vulnerability by sending a crafted autonomic network channel discovery packet to a device that has all the following characteristics: (1) running a Cisco IOS Software or Cisco IOS XE Software release that supports the ANI feature; (2) configured as an autonomic registrar; (3) has a whitelist configured. An exploit could allow the attacker to cause the affected device to reload. Note: Autonomic networking should be configured with a whitelist. Do not remove the whitelist as a workaround. Cisco Bug IDs: CSCvc42717. | 2 | 6.1 | Medium | 2017-07-18 | 2017-07-11 | View | |
| 18425 | CVE-2016-2150 | SPICE allows local guest OS users to read from or write to arbitrary host memory locations via crafted primary surface parameters, a similar issue to CVE-2015-5261. | 2 | 3.6 | Low | 2017-01-19 | 2016-11-29 | View |
Page 16875 of 17672, showing 5 records out of 88360 total, starting on record 84371, ending on 84375
