NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
81656  CVE-2017-5569  An issue was discovered in eClinicalWorks Patient Portal 7.0 build 13. This is a blind SQL injection within the template.jsp, which can be exploited without the need of authentication and via an HTTP POST request, and which can be used to dump database data out to a malicious server, using an out-of-band technique such as select_loadfile().    7.5  High  2017-02-07  2017-01-26  View
82168  CVE-2017-0448  An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-32721029. References: N-CVE-2017-0448.    4.3  Medium  2017-02-15  2017-02-10  View
82936  CVE-2017-0016  Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3 packets, which allows remote attackers to execute arbitrary code via a crafted SMBv2 or SMBv3 packet to the Server service, aka SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability.    7.1  High  2017-07-18  2017-07-11  View
83192  CVE-2017-5230  The Java keystore in all versions and editions of Rapid7 Nexpose is encrypted with a static password of 'r@p1d7k3y5t0r3' which is not modifiable by the user. The keystore provides storage for saved scan credentials in an otherwise secure location on disk.    6.5  Medium  2017-03-29  2017-03-20  View
83448  CVE-2017-6802  An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed RTF Streams, related to DecompressRTF() in libytnef.    Medium  2017-03-18  2017-03-13  View

Page 17391 of 17672, showing 5 records out of 88360 total, starting on record 86951, ending on 86955

Actions