Archive
January 2017
Vulnerabilities first published in this month (UTC), newest first.
1,083 results · Feed
-
Unscored —
NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service…
-
Unscored —CVE-2016-2518 EPSS 15%
The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-…
-
Unscored —
NTP before 4.2.8p7 and 4.3.x before 4.3.92 allows remote attackers to cause a denial of service (prevent subsequent aut…
-
Unscored —
Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library will alloc…
-
Unscored —
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administra…
-
Unscored —
An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administra…
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. qmiweb provides sensitive information for CfgType=get_homeCfg re…
-
Unscored —
The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. Th…
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. Undocumented TELNET and SSH services provide logins to admin wit…
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. There is a hardcoded WPS PIN of 28296607.
-
High 7.5
An issue was discovered on the D-Link DWR-932B router. WPS PIN generation is based on srand(time(0)) seeding.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. qmiweb allows directory listing with ../ traversal.
-
Unscored —
The NETGEAR WNR2000v5 router allows an administrator to perform sensitive actions by invoking the apply.cgi URL on the …
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. qmiweb allows file reading with ..%2f traversal.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. A secure_mode=no line exists in /var/miniupnpd.conf.
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. HELODBG on port 39889 (UDP) launches the "/sbin/telnetd -l /bin/…
-
Unscored —
An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.
-
Critical 9.8
The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.c…
KEV Mar 25, 2022 -
Unscored —
wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility…
-
Unscored —CVE-2017-5611 EPSS 10%
SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attac…
-
Unscored —
An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" …
-
Unscored —
An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay fun…
-
Unscored —
An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setprop…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to…
-
Unscored —
SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users…
-
Unscored —
The Sophos Web Appliance (version 4.2.1.3) is vulnerable to two Remote Command Injection vulnerabilities affecting its …
-
Unscored —
The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injecti…
-
Unscored —
The AppleTalk parser in tcpdump before 4.9.0 has a buffer overflow in print-atalk.c, multiple functions.
-
Unscored —
The Juniper PPPoE ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-juniper.c:juniper_parse_header().
-
Unscored —
The MPLS parser in tcpdump before 4.9.0 has a buffer overflow in print-mpls.c:mpls_print().
-
Unscored —
The LLC/SNAP parser in tcpdump before 4.9.0 has a buffer overflow in print-llc.c:llc_print().
-
Unscored —
The CALM FAST parser in tcpdump before 4.9.0 has a buffer overflow in print-calm-fast.c:calm_fast_print().
-
Unscored —
The PPP parser in tcpdump before 4.9.0 has a buffer overflow in print-ppp.c:ppp_hdlc_if_print().
-
Unscored —
The IEEE 802.11 parser in tcpdump before 4.9.0 has a buffer overflow in print-802_11.c:ieee802_11_radio_print().
-
Unscored —
The IPComp parser in tcpdump before 4.9.0 has a buffer overflow in print-ipcomp.c:ipcomp_print().
-
Unscored —
The GeoNetworking parser in tcpdump before 4.9.0 has a buffer overflow in print-geonet.c, multiple functions.
-
Unscored —
The PIM parser in tcpdump before 4.9.0 has a buffer overflow in print-pim.c:pimv2_check_checksum().
-
Unscored —
The VAT parser in tcpdump before 4.9.0 has a buffer overflow in print-udp.c:vat_print().