| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-12305 | 7.2 |
A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary commands, aka Debug Shell Command Injection. The vulnerability is due to insufficient input validation. An attacker
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12290 | 4.3 |
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service t
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12321 | 4.3 |
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service t
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12322 | 4.3 |
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service t
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12300 | 5.0 |
A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the Server Message Block Version 2 (SMB2) protocol. The vulnerability
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12323 | 4.3 |
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service t
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12320 | 4.3 |
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service t
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12315 | 2.1 |
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local attacker to view sensitive information that should be restricted in the system log files. The attacker would ha
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12292 | 4.3 |
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service t
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12291 | 4.3 |
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack or redirect a user of the affected service t
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-12337 | 10.0 |
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote attacker to gain unauthorized, elevated access to an affected device. The vuln
|
09-10-2019 - 23:22 | 16-11-2017 - 07:29 | |
| CVE-2017-1087 | 4.6 |
In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, meaning a process located in one jail can read and modify the content of POSIX shared memory objects created by a process in another jail or th
|
03-10-2019 - 00:03 | 16-11-2017 - 20:29 | |
| CVE-2017-12635 | 10.0 |
Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit _users documents with duplicate keys for 'roles' used for access control within the data
|
03-10-2019 - 00:03 | 14-11-2017 - 20:29 | |
| CVE-2004-0714 | 5.0 |
Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memo
|
30-10-2018 - 16:26 | 27-07-2004 - 04:00 | |
| CVE-2017-15806 | 6.8 |
The send function in the ezcMailMtaTransport class in Zeta Components Mail before 1.8.2 does not properly restrict the set of characters used in the ezcMail returnPath property, which might allow remote attackers to execute arbitrary code via a craft
|
02-12-2017 - 13:00 | 15-11-2017 - 16:29 | |
| CVE-2017-1086 | 2.1 |
In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant for the state of any thread, and the kernel does not fill the irrelevan
|
02-12-2017 - 12:57 | 16-11-2017 - 20:29 |