NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 85020 | CVE-2017-8055 | WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox. | 2 | 5 | Medium | 2017-05-07 | 2017-04-27 | View | |
| 85019 | CVE-2017-8054 | The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted PDF document. | 2 | 4.3 | Medium | 2017-04-27 | 2017-04-25 | View | |
| 85018 | CVE-2017-8053 | PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentStructure (PdfParser.cpp). | 2 | 4.3 | Medium | 2017-04-27 | 2017-04-25 | View | |
| 85017 | CVE-2017-8052 | Craft CMS before 2.6.2974 allows XSS attacks. | 2 | 4.3 | Medium | 2017-04-27 | 2017-04-26 | View | |
| 85016 | CVE-2017-8051 | Tenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload.py script in the Web UI. Through the manipulation of the tns_appliance_session_user parameter, a remote attacker can inject arbitrary commands. | 2 | 10 | High | 2017-04-27 | 2017-04-26 | View |
Page 669 of 17672, showing 5 records out of 88360 total, starting on record 3341, ending on 3345
