Archive
6 January 2017
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
High 7.5
Security Constraint Bypass in Spring Security
An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Security does not consider URL path parameters when processing security constraints. By adding a URL path parameter with an encoded "/" to a r…
-
Unscored —
An issue was discovered in Pivotal GemFire for PCF 1.6.x versions prior to 1.6.5 and 1.7.x versions prior to 1.7.1. The…
-
Unscored —
An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify t…
-
Unscored —
An issue was discovered in EMC ScaleIO versions before 2.0.1.1. Incorrect permissions on the SCINI driver may allow a l…
-
Unscored —
An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may cause a denial-of-s…
-
Unscored —
An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a spe…
-
Unscored —
A design flaw in the Trane ComfortLink II SCC firmware version 2.0.2 service allows remote attackers to take complete c…
-
Unscored —
An exploitable remote code execution vulnerability exists in the Trane ComfortLink II firmware version 2.0.2 in DSS ser…
-
Unscored —
An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timest…
-
Unscored —
An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec…
-
Unscored —
An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5f…
-
Unscored —
A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection a…
-
Unscored —
When opening a Hangul Hcell Document (.cell) and processing a property record within the Workbook stream, Hancom Office…
-
Unscored —
A denial of service vulnerability exists in the IOCTL handling functionality of Kaspersky Internet Security KL1 driver.…
-
Unscored —
A denial of service vulnerability exists in the syscall filtering functionality of the Kaspersky Internet Security KLIF…
-
Unscored —
When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use…
-
Unscored —
When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will att…
-
Unscored —
A local privilege escalation vulnerability exists in BlueStacks App Player. The BlueStacks App Player installer creates…
-
Unscored —
When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will use…
-
Unscored —
Multiple information leaks exist in various IOCTL handlers of the Kaspersky Internet Security KLDISK driver. Specially …
-
Unscored —
A denial of service vulnerability exists in the syscall filtering functionality of Kaspersky Internet Security KLIF dri…
-
Unscored —
An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functio…
-
Unscored —
An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion f…
-
Unscored —
When opening a Hangul Hcell Document (.cell) and processing a record that uses the CSSValFormat object, Hancom Office 2…
-
Unscored —
When opening a Hangul Hcell Document (.cell) and processing a particular record within the Workbook stream, an index mi…
-
Unscored —
A directory traversal exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent from the …
-
Unscored —
A local denial of service vulnerability exists in window broadcast message handling functionality of Kaspersky Anti-Vir…
-
Unscored —
When opening a Hangul HShow Document (.hpt) and processing a structure within the document, Hancom Office 2014 will att…
-
Unscored —
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…
-
Unscored —
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent…
-
Unscored —
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…
-
Unscored —
An exploitable memory corruption vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted…
-
Unscored —
A buffer overflow vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent…
-
Unscored —
A denial of service vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data se…
-
Unscored —
An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the ser…
-
Unscored —
An out-of-bounds write vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data…
-
Unscored —
Type confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface. Attacker passing dif…
-
Unscored —
A NULL pointer dereference vulnerability exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT …
-
Unscored —
An information leak exists in the handling of the MXIT protocol in Pidgin. Specially crafted MXIT data sent via the ser…
-
Unscored —
A buffer overflow vulnerability exists in the handling of the MXIT protocol Pidgin. Specially crafted data sent via the…