NVD List

Id Name Description Reject CVSS Version CVSS Score Severity Pub Date Modified Date Actions
81153  CVE-2002-2202  Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email.    3.8  Low  2017-01-05  2008-09-05  View
15873  CVE-2010-4626  The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt_rand function, which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account"s password, and then conducting a brute-force attack.    5.1  Medium  2017-01-18  2011-01-11  View
16129  CVE-2010-4894  SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information.    7.5  High  2017-01-18  2012-02-13  View
16385  CVE-2010-5176  ** DISPUTED ** Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler execution, aka an argument-switch attack or a KHOBE attack. NOTE: this issue is disputed by some third parties because it is a flaw in a protection mechanism for situations where a crafted program has already begun to execute.    6.2  Medium  2017-01-18  2012-08-27  View
81921  CVE-2016-8966  IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.    4.3  Medium  2017-02-15  2017-02-13  View

Page 81 of 17672, showing 5 records out of 88360 total, starting on record 401, ending on 405

Actions