NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
86811  CVE-2016-4909  Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via unspecified vectors.    4.3  Medium  2017-06-18  2017-06-13  View
87067  CVE-2017-8530  Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge does not properly enforce same-origin policies, aka Microsoft Edge Security Feature Bypass Vulnerability. This CVE ID is unique from CVE-2017-8523 and CVE-2017-8555.    5.8  Medium  2017-07-18  2017-07-07  View
87323  CVE-2017-9754  The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during objdump -D execution.    6.8  Medium  2017-06-28  2017-06-26  View
87579  CVE-2017-1000042  Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.          2017-07-18  2017-07-17  View
87835  CVE-2017-11338  There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input will lead to a remote denial of service attack.          2017-07-18  2017-07-17  View

Page 457 of 17672, showing 5 records out of 88360 total, starting on record 2281, ending on 2285

Actions