Archive
January 2017
Vulnerabilities first published in this month (UTC), newest first.
69 results · Clear filters · Feed
-
Unscored —
Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC serv…
-
High 8.1
An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, …
KEV Sep 8, 2022 -
Medium 5.5CVE-2017-5223 Public exploit
Local file disclosure in PHPMailer
An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script…
-
Unscored —
wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 befor…
-
Unscored —CVE-2017-5473 Public exploit
Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authenticat…
-
Unscored —
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a cra…
-
Unscored —CVE-2016-8467 Public exploit
An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem comm…
-
Unscored —CVE-2016-9813 Public exploit
The _parse_pat function in the mpegts parser in GStreamer before 1.10.2 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2016-10140 Public exploit
Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled w…
-
Critical 9.8
Improper Neutralization of Special Elements used in an LDAP Query in Jenkins
The remoting module in Jenkins before 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code via a crafted serialized Java object, which triggers an LDAP query to a third-party server.
-
Unscored —CVE-2016-8462 Public exploit
An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its p…
-
Unscored —CVE-2016-6772 Public exploit
An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to execute arbitrary code w…
-
Unscored —
Web2py versions 2.14.5 and below was affected by Local File Inclusion vulnerability, which allows a malicious intended …
-
Medium 4.5CVE-2016-4808 Public exploit
Web2py Cross-Site Request Forgery vulnerability
Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Request Forgery) vulnerability, which allows an attacker to trick a logged in user to perform some unwanted actions i.e An attacker can trick an victim to disable the installed application just…
-
Medium 4.8CVE-2016-4807 Public exploit
Web2py Reflected XSS vulnerability
Web2py versions 2.14.5 and below was affected by Reflected XSS vulnerability, which allows an attacker to perform an XSS attack on logged in user (admin).
-
Unscored —
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when processing the …
-
Unscored —
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability when parsing Adobe T…
-
Unscored —
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable heap overflow vulnerability related to texture c…
-
Unscored —
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability related to the p…
-
Unscored —
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript…
-
Unscored —
Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable memory corruption vulnerability due to a concurr…
-
Unscored —CVE-2015-4592 Public exploit
eClinicalWorks Population Health (CCMR) suffers from an SQL injection vulnerability in portalUserService.jsp which allo…
-
Unscored —CVE-2015-4593 Public exploit
eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserSer…
-
Unscored —CVE-2015-4591 Public exploit
eClinicalWorks Population Health (CCMR) suffers from a cross site scripting vulnerability in login.jsp which allows rem…
-
Unscored —CVE-2015-4594 Public exploit
eClinicalWorks Population Health (CCMR) suffers from a session fixation vulnerability. When authenticating a user, the …
-
High 7.3
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execut…
-
High 7.0CVE-2016-10010 Public exploit
sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which…
-
Unscored —
Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analyti…
-
Unscored —CVE-2017-5005 Public exploit
Stack-based buffer overflow in Quick Heal Internet Security 10.1.0.316 and earlier, Total Security 10.1.0.316 and earli…