Archive
27 February 2017
Vulnerabilities first published on this day (UTC), newest first.
30 results · Feed
-
Unscored —
The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of servi…
-
Unscored —
The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a den…
-
Unscored —
The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a…
-
Unscored —
ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted …
-
Unscored —
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created betwe…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1)…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous …
-
Unscored —
The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Devi…
-
Unscored —
The virtio_gpu_set_scanout function in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows l…
-
Unscored —
The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick all…
-
High 8.8
An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus.…
-
High 8.8
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malform…
-
High 8.8
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an ob…
-
Unscored —
Drivers for the Intel Ethernet Controller X710 and Intel Ethernet Controller XL710 families before version 22.0 are vul…
-
Unscored —
A non-privileged user of the Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could perform a…
-
Unscored —
The Siemens web application RUGGEDCOM NMS < V1.2 on port 8080/TCP and 8081/TCP could allow a remote attacker to perform…
-
Unscored —CVE-2017-6343 EPSS 60%
The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0…
-
Unscored —
XML External Entity (XXE) vulnerability in Grails PDF Plugin 0.6 allows remote attackers to read arbitrary files via a …
-
Unscored —
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not p…
-
Unscored —CVE-2017-6342 EPSS 13%
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2…
-
Unscored —
The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which …
-
Unscored —
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does …
-
Unscored —
Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, …
-
Unscored —
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level ca…
-
Unscored —
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level ca…
-
Unscored —
The W3C High Resolution Time API, as implemented in various web browsers, does not consider that memory-reference times…
-
Unscored —
Page table walks conducted by the MMU during virtual to physical address translation leave a trace in the last level ca…
-
Critical 9.8
Directory traversal vulnerability in RubyZip
The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the fil…