Archive
17 February 2017
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Unscored —
XML external entity (XXE) vulnerability in eParakstitajs 3 before 1.3.9 and eParaksts Java lib before 2.5.13 allows rem…
-
Unscored —
SQL injection vulnerability in inc/lib/Control/Backend/menus.control.php in GeniXCMS through 1.0.2 allows remote authen…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Web Calendar in SOGo before 2.2.0 allow remote attackers to …
-
Unscored —
The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote atta…
-
Medium 4.7
MantisBT XSS through weak CSP when using Gravatar plugin
MantisBT before 1.3.1 and 2.x before 2.0.0-beta.2 uses a weak Content Security Policy when using the Gravatar plugin, which allows remote attackers to conduct cross-site scripting (XSS) attacks via unspecified vectors.
-
Unscored —
Integer overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service (cr…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the View Raw Source page in the Web Calendar in SOGo before 3.1.…
-
Unscored —
Incomplete blacklist in SOGo before 2.3.12 and 3.x before 3.1.1 allows remote authenticated users to obtain sensitive i…
-
Unscored —
Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vector…
-
Unscored —
Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vecto…
-
Unscored —
Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via …
-
Unscored —
The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown …
-
Unscored —
Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.
-
Unscored —
Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vecto…
-
Unscored —
Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM…
-
Unscored —
SOGo before 2.3.12 and 3.x before 3.1.1 does not restrict access to the UID and DTSTAMP attributes, which allows remote…
-
Unscored —
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (N…
-
Unscored —
The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cau…
-
Unscored —
The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service …
-
Unscored —
Cross-site scripting (XSS) vulnerability in manage_custom_field_edit_page.php in MantisBT 1.2.19 and earlier allows rem…
-
Unscored —
dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds writ…
-
Unscored —
The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denia…
-
Unscored —
The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (i…
-
Unscored —
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (o…
-
Unscored —
The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attac…
-
Unscored —
The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bou…
-
Unscored —
The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL…
-
Unscored —
libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a larg…
-
Unscored —
The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (…
-
Unscored —
The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denia…
-
Unscored —
The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bo…
-
Unscored —
The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (ou…
-
Unscored —
The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of se…
-
Unscored —
It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP eng…
-
Unscored —
In Wireshark 2.2.4 and earlier, a crafted or malformed STANAG 4607 capture file will cause an infinite loop and memory …
-
Unscored —
Type confusion in Histogram in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for And…
-
Unscored —
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, resolved promise…
-
Unscored —
FFmpeg in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, failed to perform proper bounds checking, whi…
-
Unscored —
Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to preven…
-
Unscored —
A heap buffer overflow in V8 in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for An…