NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
41220 | CVE-2013-6017 | Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message, as demonstrated by the SRC attribute of an IFRAME element. | 2 | 4.3 | Medium | 2017-01-18 | 2016-12-30 | View | |
41476 | CVE-2013-6418 | PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate. | 2 | 5.8 | Medium | 2017-01-18 | 2016-11-28 | View | |
41732 | CVE-2013-6868 | SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unspecified vectors. | 2 | 7.8 | High | 2017-01-18 | 2013-11-25 | View | |
41988 | CVE-2013-7252 | kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a codebook attack. | 2 | 5 | Medium | 2017-01-18 | 2016-08-02 | View | |
42244 | CVE-2012-0101 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x and 5.1.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0087 and CVE-2012-0102. | 2 | 4 | Medium | 2017-01-19 | 2014-02-20 | View |
Page 283 of 17672, showing 5 records out of 88360 total, starting on record 1411, ending on 1415