NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 83363 | CVE-2017-6466 | F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the SYSTEM account. Note that when Software Updater is configured to install updates automatically, it checks if the downloaded file is digitally signed by default, but does not check the author of the signature. When running in manual mode (default), no signature check is performed. | 2 | 9.3 | High | 2017-03-18 | 2017-03-14 | View | |
| 83362 | CVE-2017-6465 | Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP server it is connecting to; however, it doesn't check the response's length, leading to a buffer overflow situation. | 2 | 7.5 | High | 2017-03-18 | 2017-03-14 | View | |
| 83783 | CVE-2017-6464 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive. | 2 | 4 | Medium | 2017-04-27 | 2017-03-29 | View | |
| 83782 | CVE-2017-6463 | NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option. | 2 | 4 | Medium | 2017-04-27 | 2017-03-29 | View | |
| 83781 | CVE-2017-6462 | Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/datum device. | 2 | 4.6 | Medium | 2017-04-27 | 2017-03-29 | View |
Page 374 of 17672, showing 5 records out of 88360 total, starting on record 1866, ending on 1870
