NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 83142 | CVE-2017-1133 | IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534. | 2 | 3.5 | Low | 2017-04-27 | 2017-03-31 | View | |
| 83688 | CVE-2017-1142 | IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM Reference #: 1998874. | 2 | 4 | Medium | 2017-04-27 | 2017-03-31 | View | |
| 83689 | CVE-2017-1143 | IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM Reference #: 1998874. | 2 | 3.5 | Low | 2017-04-27 | 2017-03-31 | View | |
| 83720 | CVE-2017-5237 | Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, RESET! | 2 | 7.8 | High | 2017-04-27 | 2017-03-30 | View | |
| 83465 | CVE-2017-6828 | Heap-based buffer overflow in the readValue function in FileHandle.cpp in audiofile (aka libaudiofile and Audio File Library) 0.3.6 allows remote attackers to have unspecified impact via a crafted WAV file. | 2 | 6.8 | Medium | 2017-04-27 | 2017-03-30 | View |
Page 1869 of 17672, showing 5 records out of 88360 total, starting on record 9341, ending on 9345
