Archive
22 February 2017
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —
It was discovered that the zebra daemon in Quagga before 1.0.20161017 suffered from a stack-based buffer overflow when …
-
Unscored —
Buffer overflow in the built-in web server in DiskSavvy Enterprise 9.4.18 allows remote attackers to execute arbitrary …
-
Critical 9.8
ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitr…
KEV Mar 7, 2022 -
Unscored —
Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data …
-
Unscored —
IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling…
-
Unscored —
IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using…
-
Unscored —
IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to o…
-
Unscored —
Munin before 2.999.6 has a local file write vulnerability when CGI graphs are enabled. Setting multiple upper_limit GET…
-
Unscored —
The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local u…
-
Unscored —CVE-2016-8636 Public exploit
Integer overflow in the mem_check_range function in drivers/infiniband/sw/rxe/rxe_mr.c in the Linux kernel before 4.9.1…
-
Medium 6.1
Improper Neutralization of Input During Web Page Generation in html5lib
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
-
Unscored —
The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal…
-
Medium 6.1
Cross-site Scripting in html5lib
The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a different vulnerability than CVE-2016-9909.
-
Unscored —
The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to …
-
Unscored —
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
-
Unscored —
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software int…
-
Unscored —
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software int…
-
Unscored —
OpenText Documentum D2 (formerly EMC Documentum D2) 4.x allows remote attackers to execute arbitrary commands via a cra…
-
Unscored —
OpenText Documentum Content Server (formerly EMC Documentum Content Server) 7.3, when PostgreSQL Database is used and r…
-
Unscored —
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerabil…
-
Unscored —CVE-2016-9684 Public exploit
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerabil…
-
Unscored —
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerab…
-
Unscored —
A vulnerability in the web framework Cisco Unified Communications Manager could allow an unauthenticated, remote attack…
-
Unscored —
A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email S…
-
Unscored —
A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) cou…
-
Unscored —
A vulnerability in exporting functions of the user interface for Cisco Prime Collaboration Assurance could allow an aut…
-
Unscored —
An HTTP Packet Processing vulnerability in the Web Bridge interface of the Cisco Meeting Server (CMS), formerly Acano C…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an u…
-
Unscored —
A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct …
-
Unscored —
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, re…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Switches could allow an u…
-
Unscored —
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote att…
-
Unscored —
An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) co…
-
Unscored —
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, re…
-
Unscored —
A vulnerability in the file download functions for Cisco Prime Collaboration Assurance could allow an authenticated, re…
-
Unscored —
A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to…
-
Unscored —
A vulnerability in the sponsor portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote atta…
-
Unscored —
A vulnerability in the serviceability page of Cisco Unified Communications Manager could allow an unauthenticated, remo…
-
Unscored —
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentic…