NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 84838 | CVE-2017-7409 | Palo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via crafted request parameters, aka PAN-SA-2017-0011 and PAN-70674. | 2 | 4.3 | Medium | 2017-07-18 | 2017-07-10 | View | |
| 85862 | CVE-2017-2534 | An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the Speech Framework component. It allows attackers to conduct sandbox-escape attacks via a crafted app. | 2 | 6.8 | Medium | 2017-07-18 | 2017-07-07 | View | |
| 86630 | CVE-2017-6640 | A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346. | 2 | 10 | High | 2017-07-18 | 2017-07-07 | View | |
| 87142 | CVE-2017-9601 | The FNB Kemp Mobile Banking by First National Bank of Kemp app 3.0.2 -- aka fnb-kemp-mobile-banking/id571448725 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 2 | 4.3 | Medium | 2017-07-18 | 2017-06-28 | View | |
| 87398 | CVE-2017-9255 | The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file. | 2 | 7.1 | High | 2017-07-18 | 2017-06-30 | View |
Page 566 of 17672, showing 5 records out of 88360 total, starting on record 2826, ending on 2830
