NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 33617 | CVE-2014-5992 | The successsecrets (aka com.alek.successsecrets) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2 | 5.4 | Medium | 2017-01-19 | 2014-12-03 | View | |
| 41431 | CVE-2013-6372 | The Subversion plugin before 1.54 for Jenkins stores credentials using base64 encoding, which allows local users to obtain passwords and SSH private keys by reading a subversion.credentials file. | 2 | 2.1 | Low | 2017-01-18 | 2014-05-09 | View | |
| 45869 | CVE-2012-4487 | The Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions, which allows remote authenticated parent users to change their role by switching to a subuser they created. | 2 | 4 | Medium | 2017-01-19 | 2012-11-05 | View | |
| 54912 | CVE-2007-2748 | The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375. | 2 | 4.3 | Medium | 2017-01-07 | 2012-10-30 | View | |
| 60696 | CVE-2006-1991 | The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument. | 2 | 6.4 | Medium | 2016-12-20 | 2016-11-18 | View |
Page 2998 of 17672, showing 5 records out of 88360 total, starting on record 14986, ending on 14990
