NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 81681 | CVE-2017-5677 | PEAR HTML_AJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression. | 2 | 7.5 | High | 2017-03-18 | 2017-02-28 | View | |
| 82193 | CVE-2017-2990 | Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 decompression routine. Successful exploitation could lead to arbitrary code execution. | 2 | 10 | High | 2017-07-18 | 2017-06-30 | View | |
| 82961 | CVE-2017-0049 | The VBScript engine in Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka Scripting Engine Information Disclosure Vulnerability. This vulnerability is different from those described in CVE-2017-0018, and CVE-2017-0037. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-11 | View | |
| 83217 | CVE-2017-5579 | Memory leak in the serial_exit_core function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations. | 2 | 4.9 | Medium | 2017-07-18 | 2017-06-30 | View | |
| 83473 | CVE-2017-6847 | The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file. | 2 | 4.3 | Medium | 2017-03-18 | 2017-03-16 | View |
Page 373 of 17672, showing 5 records out of 88360 total, starting on record 1861, ending on 1865
