NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
87595  CVE-2017-1000058  Stored XSS in chevereto CMS before version 3.8.11          2017-07-18  2017-07-17  View
87851  CVE-2017-11361  Inteno routers have a JUCI ACL misconfiguration that allows the user account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the user password might be user or might match the Wi-Fi key.)          2017-07-18  2017-07-17  View
87596  CVE-2017-1000059  Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users.          2017-07-18  2017-07-17  View
87852  CVE-2017-11362  In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact within International Components for Unicode (ICU) for C/C++ via a long first argument to the msgfmt_parse_message function.          2017-07-18  2017-07-17  View
23852  CVE-2015-1579  Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter in a revslider_show_image action to wp-admin/admin-ajax.php. NOTE: this vulnerability may be a duplicate of CVE-2014-9734.    Medium  2017-07-18  2017-07-17  View

Page 31 of 17672, showing 5 records out of 88360 total, starting on record 151, ending on 155

Actions