NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 3153 | CVE-2008-3270 | yum-rhn-plugin in Red Hat Enterprise Linux (RHEL) 5 does not verify the SSL certificate for a file download from a Red Hat Network (RHN) server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service (loss of updates) or force the download and installation of official Red Hat packages that were not requested. | 2 | 2.6 | Low | 2017-01-03 | 2010-08-21 | View | |
| 12966 | CVE-2010-1439 | yum-rhn-plugin in Red Hat Network Client Tools (aka rhn-client-tools) on Red Hat Enterprise Linux (RHEL) 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security updates, by leveraging authentication data from this file. | 2 | 3.6 | Low | 2017-01-18 | 2010-08-21 | View | |
| 67393 | CVE-2005-1668 | YusASP Web Asset Manager 1.0 allows remote attackers to gain privileges via a direct request to assetmanager.asp. | 2 | 7.5 | High | 2017-01-03 | 2008-09-05 | View | |
| 55237 | CVE-2007-3083 | Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for zblog.mdb. | 2 | 7.8 | High | 2017-01-07 | 2012-10-30 | View | |
| 46619 | CVE-2012-5491 | z3c.form, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote attackers to obtain the default form field values by leveraging knowledge of the form location and the element id. | 2 | 4.3 | Medium | 2017-01-19 | 2014-10-01 | View |
Page 17634 of 17672, showing 5 records out of 88360 total, starting on record 88166, ending on 88170
