| Max CVSS | 10.0 | Min CVSS | 3.5 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-3854 | 8.3 |
A vulnerability in the mesh code of Cisco Wireless LAN Controller (WLC) software could allow an unauthenticated, remote attacker to impersonate a WLC in a meshed topology. The vulnerability is due to insufficient authentication of the parent access p
|
14-09-2021 - 12:12 | 15-03-2017 - 20:59 | |
| CVE-2017-6377 | 5.0 |
When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for the file being attached, resulting in an access bypass.
|
03-10-2019 - 00:03 | 16-03-2017 - 14:59 | |
| CVE-2017-6381 | 6.8 |
A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies
|
03-10-2019 - 00:03 | 16-03-2017 - 14:59 | |
| CVE-2017-3819 | 9.0 |
A privilege escalation vulnerability in the Secure Shell (SSH) subsystem in the StarOS operating system for Cisco ASR 5000 Series, ASR 5500 Series, ASR 5700 Series devices, and Cisco Virtualized Packet Core could allow an authenticated, remote attack
|
03-10-2019 - 00:03 | 15-03-2017 - 20:59 | |
| CVE-2017-10229 | 5.5 |
Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: Event Viewer). The supported version that is affected is 7.30.562. Easily exploitable vulnerability allows low privileged
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2017-3872 | 4.3 |
A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct XSS attacks against a user of an affected device. More I
|
22-04-2019 - 18:39 | 17-03-2017 - 22:59 | |
| CVE-2004-0010 | 7.2 |
Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.
|
11-10-2017 - 01:29 | 03-03-2004 - 05:00 | |
| CVE-2008-2824 | 10.0 |
Unspecified vulnerability in the Extensible Interface Platform in Web Services in Xerox WorkCentre 7655, 7665, and 7675 allows remote attackers to make configuration changes via unknown vectors.
|
08-08-2017 - 01:31 | 23-06-2008 - 17:41 | |
| CVE-2017-3877 | 4.3 |
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of the web interface of the affected softw
|
12-07-2017 - 01:29 | 17-03-2017 - 22:59 | |
| CVE-2017-6379 | 5.1 |
Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker to disable some blocks on a site. This issue is mitigated by the fact that users would have to know the block ID.
|
12-07-2017 - 01:29 | 16-03-2017 - 14:59 | |
| CVE-2017-3866 | 4.3 |
A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CS
|
12-07-2017 - 01:29 | 17-03-2017 - 22:59 | |
| CVE-2017-3874 | 3.5 |
A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a cross-site scripting (XSS) attack. More Information: CSCvb70033. Known Affected Releases: 11.5(1.110
|
12-07-2017 - 01:29 | 17-03-2017 - 22:59 | |
| CVE-2017-3880 | 6.4 |
An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on the Cisco WebEx Meetings Server. More Information: CSCvd50728. Known Affected Releases: 2.6
|
12-07-2017 - 01:29 | 17-03-2017 - 22:59 | |
| CVE-2017-3811 | 4.0 |
An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc39165. Known Affected Releases: 2.6
|
12-07-2017 - 01:29 | 17-03-2017 - 22:59 | |
| CVE-2017-3846 | 5.0 |
A vulnerability in the Client Manager Server of Cisco Workload Automation and Cisco Tidal Enterprise Scheduler could allow an unauthenticated, remote attacker to retrieve any file from the Client Manager Server. The vulnerability is due to insufficie
|
12-07-2017 - 01:29 | 15-03-2017 - 20:59 |