Archive
February 2017
Vulnerabilities first published in this month (UTC), newest first.
1,041 results · Feed
-
Unscored —
Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel I…
-
Unscored —
(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have un…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Tenable Nessus before 6.9.1 allows remote authenticated users to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Tenable Log Correlation Engine (aka LCE) before 4.8.1 allows remote authent…
-
Unscored —
The Xvnc server in TigerVNC allows remote attackers to cause a denial of service (invalid memory access and crash) by t…
-
Unscored —
gtk-vnc before 0.7.0 does not properly check boundaries of subrectangle-containing tiles, which allows remote servers t…
-
Unscored —
Buffer overflow in the ModifiablePixelBuffer::fillRect function in TigerVNC before 1.7.1 allows remote servers to execu…
-
Unscored —
Multiple integer overflows in the (1) vnc_connection_server_message and (2) vnc_color_map_set functions in gtk-vnc befo…
-
High 8.8
An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A s…
-
High 8.8
An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malforme…
-
High 8.8
An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to…
-
Unscored —
Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files …
-
Unscored —
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of servi…
-
Unscored —
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a den…
-
Unscored —
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a…
-
Unscored —
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted …
-
Unscored —
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created betwe…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1)…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous …
-
Unscored —
The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Devi…
-
Unscored —
The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows l…
-
Unscored —
The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick all…
-
High 8.8
An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus.…
-
High 8.8
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malform…
-
High 8.8
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an ob…
-
Unscored —
Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families before version 22.0 are vul…
-
Unscored —
A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a…
-
Unscored —
The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform…
-
Unscored —CVE-2017-6343 EPSS 60%
The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0…
-
Unscored —
XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a …
-
Unscored —
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not p…
-
Unscored —CVE-2017-6342 EPSS 13%
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2…
-
Unscored —
The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which …
-
Unscored —
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does …
-
Unscored —
Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, …
-
Unscored —
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level ca…
-
Unscored —
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level ca…
-
Unscored —
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times…