NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
67293 | CVE-2005-1566 | Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell. | 2 | 7.5 | High | 2017-01-03 | 2016-10-17 | View | |
25561 | CVE-2015-3993 | Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users to bypass intended write-access restrictions and execute an UPDATE statement by referencing a table. | 2 | 6.5 | Medium | 2017-01-19 | 2016-12-05 | View | |
18398 | CVE-2016-2098 | Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application"s unrestricted use of the render method. | 2 | 7.5 | High | 2017-01-19 | 2016-12-02 | View | |
21118 | CVE-2016-6317 | Action Record in Ruby on Rails 4.2.x before 4.2.7.1 does not properly consider differences in parameter handling between the Active Record component and the JSON implementation, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks or trigger missing WHERE clauses via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2660, CVE-2012-2694, and CVE-2013-0155. | 2 | 5 | Medium | 2017-01-19 | 2016-11-28 | View | |
6395 | CVE-2008-6664 | action.php in SH-News 3.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the shuser and shpass cookies to non-zero values. | 2 | 7.5 | High | 2017-01-03 | 2009-04-08 | View |
Page 586 of 17672, showing 5 records out of 88360 total, starting on record 2926, ending on 2930