NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
70132  CVE-2005-4534  The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files.    2  7.5  High  2017-01-03  2008-09-05  View
10526  CVE-2011-3972  The shader translator implementation in Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.    2  5  Medium  2017-01-07  2016-09-23  View
46880  CVE-2012-5855  The SHAddToRecentDocs function in VideoLAN VLC media player 2.0.4 and earlier might allow user-assisted attackers to cause a denial of service (crash) via a crafted file name that triggers an incorrect string-length calculation when the file is added to VLC. NOTE: it is not clear whether this issue crosses privilege boundaries or whether it can be exploited without user interaction.    2  4.3  Medium  2017-01-19  2013-11-02  View
83814  CVE-2017-7187  The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a large command size in an SG_NEXT_CMD_LEN ioctl call, leading to out-of-bounds write access in the sg_write function.    2  7.2  High  2017-07-18  2017-07-11  View
50492  CVE-2009-3288  The sg_build_indirect function in drivers/scsi/sg.c in Linux kernel 2.6.28-rc1 through 2.6.31-rc8 uses an incorrect variable when accessing an array, which allows local users to cause a denial of service (kernel OOPS and NULL pointer dereference), as demonstrated by using xcdroast to duplicate a CD. NOTE: this is only exploitable by users who can open the cdrom device.    2  4.9  Medium  2017-01-07  2011-09-14  View

Page 3150 of 17672, showing 5 records out of 88360 total, starting on record 15746, ending on 15750

<<first 3146 | 3147 | 3148 | 3149 | 3150 | 3151 | 3152 | 3153 | 3154 last>>

Actions