10 February 2017

9 results · Feed

• High 8.8
  CVE-2016-8709

  A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. …

  Nitro Nitro Pro
  Feb 10, 2017
• High 8.8
  CVE-2016-8711

  A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially cr…

  Nitro Nitro Pro
  Feb 10, 2017
• High 8.8
  CVE-2016-8713

  A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5…

  Nitro Nitro Pro
  Feb 10, 2017
• Unscored —
  CVE-2016-10216

  An issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to insufficient filtrati…

  Feb 10, 2017
• Unscored —
  CVE-2016-10215

  An issue was discovered in Fastspot BigTree bigtree-form-builder before 1.2. The vulnerability exists due to insufficie…

  Feb 10, 2017
• Unscored —
  CVE-2017-5942

  An issue was discovered in the WP Mail plugin before 1.2 for WordPress. The replyto parameter when composing a mail all…

  Feb 10, 2017
• Unscored —
  CVE-2017-5953

  vim before patch 8.0.0322 does not properly validate values for tree length when handling a spell file, which may resul…

  vim vim vim neovim Debian Ubuntu Alpine
  Feb 10, 2017
• Unscored —
  CVE-2017-5945

  An issue was discovered in the PoodLL Filter plugin through 3.0.20 for Moodle. The vulnerability exists due to insuffic…

  Feb 10, 2017
• Critical 9.8
  CVE-2017-5954

  Code Execution Through IIFE in serialize-to-js

  An issue was discovered in the serialize-to-js package 0.5.0 for Node.js. Untrusted data passed into the deserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression…

  serialize-to-js npm
  Feb 10, 2017