NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 87092 | CVE-2017-9463 | The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The user_list_backend.php component is affected: values of the iDisplayStart & iDisplayLength parameters are not sanitized; these are used to construct a SQL query and retrieve a list of registered users into the application. | 2 | 4 | Medium | 2017-06-23 | 2017-06-19 | View | |
| 87093 | CVE-2017-9464 | An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the redirect parameter is not validated. | 2 | 5.8 | Medium | 2017-06-23 | 2017-06-19 | View | |
| 86697 | CVE-2017-9465 | The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) or obtain sensitive information from process memory via a crafted file that is mishandled in the yr_re_fast_exec function in libyara/re.c and the _yr_scan_match_callback function in libyara/scan.c. | 2 | 5.8 | Medium | 2017-06-17 | 2017-06-14 | View | |
| 87402 | CVE-2017-9466 | The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encryption. This resulted in incorrect access control, which allowed attackers to gain read-write access to system settings through the protected router configuration service tddp via the LAN and Ath0 (Wi-Fi) interfaces. | 2 | 7.5 | High | 2017-07-18 | 2017-07-06 | View | |
| 86698 | CVE-2017-9468 | In Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to dereference a NULL pointer. Thus, remote IRC servers can cause a crash. | 2 | 5 | Medium | 2017-07-18 | 2017-07-07 | View |
Page 17619 of 17672, showing 5 records out of 88360 total, starting on record 88091, ending on 88095
