NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
38361 | CVE-2013-2296 | Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on (1) modifying the logging setting, (2) modifying the versioning setting, or (3) accessing activity logs via a request. | 2 | 5.5 | Medium | 2017-01-18 | 2013-09-18 | View | |
45535 | CVE-2012-4067 | Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request. | 2 | 4.3 | Medium | 2017-01-19 | 2013-09-18 | View | |
8287 | CVE-2011-1329 | WalRack 1.x before 1.1.9 and 2.x before 2.0.7 does not properly restrict file uploads, which allows remote attackers to execute arbitrary PHP code via vectors involving a double extension, as demonstrated by a .php.zzz file. | 2 | 6.8 | Medium | 2017-01-07 | 2012-04-27 | View | |
55489 | CVE-2007-3337 | wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file. | 2 | 2.1 | Low | 2017-01-07 | 2012-10-30 | View | |
44690 | CVE-2012-3013 | WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote attackers to obtain administrative access via a TCP session. | 2 | 10 | High | 2017-01-19 | 2013-10-08 | View |
Page 443 of 17672, showing 5 records out of 88360 total, starting on record 2211, ending on 2215