NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
87595 | CVE-2017-1000058 | Stored XSS in chevereto CMS before version 3.8.11 | 2017-07-18 | 2017-07-17 | View | ||||
87851 | CVE-2017-11361 | Inteno routers have a JUCI ACL misconfiguration that allows the user account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the user password might be user or might match the Wi-Fi key.) | 2017-07-18 | 2017-07-17 | View | ||||
87596 | CVE-2017-1000059 | Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users. | 2017-07-18 | 2017-07-17 | View | ||||
87852 | CVE-2017-11362 | In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function. | 2017-07-18 | 2017-07-17 | View | ||||
23852 | CVE-2015-1579 | Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734. | 2 | 5 | Medium | 2017-07-18 | 2017-07-17 | View |
Page 31 of 17672, showing 5 records out of 88360 total, starting on record 151, ending on 155