NVD List
| Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 88076 | CVE-2017-7404 | On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface visits a malicious site from another Browser tab, the malicious site then can send requests to the victim's Router without knowing the credentials (CSRF). An attacker can host a page that sends a POST request to Form2File.htm that tries to upload Firmware to victim's Router. This causes the router to reboot/crash resulting in Denial of Service. An attacker may succeed in uploading malicious Firmware. | 2 | 6.8 | Medium | 2017-07-18 | 2017-07-14 | View | |
| 88332 | CVE-2017-11406 | In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop. This was addressed in plugins/docsis/packet-docsis.c by rejecting invalid Frame Control parameter values. | 2017-07-18 | 2017-07-18 | View | ||||
| 66061 | CVE-2005-0298 | The DIRECTORY objects in Oracle 8i through Oracle 10g contain the location of a specific operating system directory, which allows users with read privileges to a DIRECTORY object to obtain sensitive information. | 2 | 5 | Medium | 2017-07-18 | 2017-07-10 | View | |
| 66317 | CVE-2005-0565 | The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension. | 2 | 7.5 | High | 2017-07-18 | 2017-07-10 | View | |
| 66573 | CVE-2005-0823 | ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.txt file, which allows local users to gain privileges. | 2 | 4.6 | Medium | 2017-07-18 | 2017-07-10 | View |
Page 81 of 17672, showing 5 records out of 88360 total, starting on record 401, ending on 405
