NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 85041 | CVE-2017-8082 | concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely tricking an admin into viewing a malicious page involving the /tools/required/files/importers/imageeditor?fID=1&imgData= URI. This results in a site-wide denial of service making the site not accessible to any users or any administrators. | 2 | 4.3 | Medium | 2017-05-07 | 2017-04-27 | View | |
| 85553 | CVE-2017-8374 | The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted audio file. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-12 | View | |
| 85809 | CVE-2017-1292 | IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system. IBM X-Force ID: 125153. | 2 | 5 | Medium | 2017-06-03 | 2017-05-31 | View | |
| 20529 | CVE-2016-5195 | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW." | 2 | 7.2 | High | 2017-06-23 | 2017-06-19 | View | |
| 86065 | CVE-2017-8338 | A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for L2TP over IPsec), preventing the affected router from accepting new connections; all devices will be disconnected from the router and all logs removed automatically. | 2 | 7.8 | High | 2017-06-03 | 2017-06-01 | View |
Page 634 of 17672, showing 5 records out of 88360 total, starting on record 3166, ending on 3170
