NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
19135 | CVE-2016-3312 | ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability." | 2 | 5 | Medium | 2017-01-19 | 2016-11-28 | View | |
55175 | CVE-2007-3018 | activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors who have restricted accounts, which allows these editors to create files in arbitrary directories. | 2 | 4 | Medium | 2017-01-07 | 2008-11-15 | View | |
36527 | CVE-2013-0156 | active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion. | 2 | 7.5 | High | 2017-01-18 | 2016-12-07 | View | |
18713 | CVE-2016-2500 | Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 19285814. | 2 | 4.3 | Medium | 2017-01-19 | 2016-06-15 | View | |
80491 | CVE-2002-1538 | Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable. | 2 | 5 | Medium | 2017-01-05 | 2008-09-05 | View |
Page 595 of 17672, showing 5 records out of 88360 total, starting on record 2971, ending on 2975