NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
84943  CVE-2017-7725  concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a canonical URL on installation of concrete5 using the Advanced Options settings. Remote attackers can make a GET request with any domain name in the Host header; this is stored and allows for arbitrary domains to be set for certain links displayed to subsequent visitors, potentially an XSS vector.    4.3  Medium  2017-04-27  2017-04-20  View
84954  CVE-2017-7854  The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.    4.3  Medium  2017-04-27  2017-04-20  View
84955  CVE-2017-7856  LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source/gdi/svmconverter.cxx.    7.5  High  2017-04-27  2017-04-20  View
84958  CVE-2017-7859  FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h264dec.c.    7.5  High  2017-04-27  2017-04-20  View
38110  CVE-2013-1987  Multiple integer overflows in X.org libXrender 0.9.7 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the (1) XRenderQueryFilters, (2) XRenderQueryFormats, and (3) XRenderQueryPictIndexValues functions.    6.8  Medium  2017-04-27  2017-04-20  View

Page 1809 of 17672, showing 5 records out of 88360 total, starting on record 9041, ending on 9045

Actions