NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
84997  CVE-2017-7963  ** DISPUTED ** The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1.4 allow attackers to cause a denial of service (memory consumption and application crash) via operations on long strings. NOTE: the vendor disputes this, stating There is no security issue here, because GMP safely aborts in case of an OOM condition. The only attack vector here is denial of service. However, if you allow attacker-controlled, unbounded allocations you have a DoS vector regardless of GMP's OOM behavior.    Medium  2017-05-07  2017-04-28  View
85509  CVE-2017-8294  libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted rule that is mishandled in the yr_re_exec function.    Medium  2017-05-07  2017-05-03  View
84233  CVE-2017-2316  A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malicious user to cause a buffer overflow leading to a denial of service.    2.1  Low  2017-05-07  2017-04-27  View
85513  CVE-2017-8298  cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a Posts > Add New action, and during creation of new tags and users.    3.5  Low  2017-05-07  2017-05-03  View
84234  CVE-2017-2317  A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unprivileged, network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure, modification of system states, and partial to full denial of services relying upon data modified by an attacker.    7.5  High  2017-05-07  2017-04-27  View

Page 1708 of 17672, showing 5 records out of 88360 total, starting on record 8536, ending on 8540

Actions