NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
67598  CVE-2005-1880  everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.    2  2.1  Low  2017-01-03  2008-09-05  View
5646  CVE-2008-5915  An unspecified function in the JavaScript implementation in Google Chrome creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.    2  2.1  Low  2017-01-03  2009-01-23  View
71182  CVE-2004-0755  The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.    2  2.1  Low  2017-07-18  2017-07-10  View
19470  CVE-2016-3697  libcontainer/user/user.go in runC before 0.1.0, as used in Docker before 1.11.2, improperly treats a numeric UID as a potential username, which allows local users to gain privileges via a numeric username in the password file in a container.    2  2.1  Low  2017-01-19  2017-01-17  View
21774  CVE-2016-7258  The kernel in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 mishandles page-fault system calls, which allows local users to obtain sensitive information from arbitrary processes via a crafted application, aka "Windows Kernel Memory Address Information Disclosure Vulnerability."    2  2.1  Low  2017-01-19  2016-12-21  View

Page 1774 of 17672, showing 5 records out of 88360 total, starting on record 8866, ending on 8870

<<first 1770 | 1771 | 1772 | 1773 | 1774 | 1775 | 1776 | 1777 | 1778 last>>

Actions