NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 19481 | CVE-2016-3713 | The msr_mtrr_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read or write to the kvm_arch_vcpu data structure, and consequently obtain sensitive information or cause a denial of service (system crash), via a crafted ioctl call. | 2 | 5.6 | Medium | 2017-01-19 | 2016-06-27 | View | |
| 85017 | CVE-2017-8052 | Craft CMS before 2.6.2974 allows XSS attacks. | 2 | 4.3 | Medium | 2017-04-27 | 2017-04-26 | View | |
| 19737 | CVE-2016-4015 | The Enqueue Server in SAP NetWeaver JAVA AS 7.1 through 7.4 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka SAP Security Note 2258784. | 2 | 5 | Medium | 2017-01-19 | 2016-04-19 | View | |
| 85273 | CVE-2016-10324 | In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c. | 2 | 7.5 | High | 2017-04-27 | 2017-04-19 | View | |
| 19993 | CVE-2016-4292 | When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use a static size to allocate a heap buffer yet explicitly trust a size from the file when modifying data inside of it. Due to this, an aggressor can corrupt memory outside the bounds of this buffer which can lead to code execution under the context of the application. | 2 | 6.8 | Medium | 2017-01-19 | 2017-01-10 | View |
Page 2078 of 17672, showing 5 records out of 88360 total, starting on record 10386, ending on 10390