NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
83775 | CVE-2017-6451 | The mx4200_send function in the legacy MX4200 refclock in NTP before 4.2.8p10 and 4.3.x before 4.3.94 does not properly handle the return value of the snprintf function, which allows local users to execute arbitrary code via unspecified vectors, which trigger an out-of-bounds memory write. | 2 | 4.6 | Medium | 2017-04-27 | 2017-03-30 | View | |
84738 | CVE-2017-6448 | The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file. | 2 | 6.8 | Medium | 2017-04-27 | 2017-04-10 | View | |
83356 | CVE-2017-6446 | XSS was discovered in Dotclear v2.11.2, affecting admin/blogs.php and admin/users.php with the sortby and order parameters. | 2 | 4.3 | Medium | 2017-03-18 | 2017-03-07 | View | |
83355 | CVE-2017-6445 | The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipulate the update packages to gain root access remotely. | 2 | 7.6 | High | 2017-06-28 | 2017-06-25 | View | |
83354 | CVE-2017-6444 | The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation. | 2 | 7.8 | High | 2017-03-18 | 2017-03-14 | View |
Page 377 of 17672, showing 5 records out of 88360 total, starting on record 1881, ending on 1885