NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
25099  CVE-2015-3201  Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the file.    2.1  Low  2017-01-19  2016-12-30  View
83189  CVE-2017-5197  There is XSS in SilverStripe CMS before 3.4.4 and 3.5.x before 3.5.2. The attack vector is a page name. An example payload is a crafted JavaScript event handler within a malformed SVG element.    4.3  Medium  2017-03-18  2017-03-07  View
88072  CVE-2017-7276  There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.          2017-07-18  2017-07-04  View
85044  CVE-2017-8099  There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's status via a GET request.    5.8  Medium  2017-05-07  2017-04-28  View
85045  CVE-2017-8100  There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings.    4.3  Medium  2017-05-07  2017-05-02  View

Page 2526 of 17672, showing 5 records out of 88360 total, starting on record 12626, ending on 12630

Actions