NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
19481  CVE-2016-3713  The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvm_arch_vcpu data structure, and consequently obtain sensitive information or cause a denial of service (system crash), via a crafted ioctl call.    5.6  Medium  2017-01-19  2016-06-27  View
85017  CVE-2017-8052  Craft CMS before 2.6.2974 allows XSS attacks.    4.3  Medium  2017-04-27  2017-04-26  View
19737  CVE-2016-4015  The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784.    Medium  2017-01-19  2016-04-19  View
85273  CVE-2016-10324  In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.    7.5  High  2017-04-27  2017-04-19  View
19993  CVE-2016-4292  When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer yet explicitly trust a size from the file when modifying data inside of it. Due to this, an aggressor can corrupt memory outside the bounds of this buffer which can lead to code execution under the context of the application.    6.8  Medium  2017-01-19  2017-01-10  View

Page 2078 of 17672, showing 5 records out of 88360 total, starting on record 10386, ending on 10390

Actions