Archive
February 2017
Vulnerabilities first published in this month (UTC), newest first.
23 results · Clear filters · Feed
-
High 8.8
An exploitable heap corruption vulnerability exists in the loadTrailer functionality of Iceni Argus version 6.6.05. A s…
-
High 8.8
An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malforme…
-
High 8.8
An exploitable integer-overflow vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to…
-
High 8.8
An exploitable uninitialized variable vulnerability which leads to a stack-based buffer overflow exists in Iceni Argus.…
-
High 8.8
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a PDF containing a malform…
-
High 8.8
An exploitable heap-based buffer overflow exists in Iceni Argus. When it attempts to convert a malformed PDF with an ob…
-
High 8.1
Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuild…
KEV Mar 28, 2022 -
High 7.5
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint…
-
High 8.8
When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office tru…
-
High 8.8
When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how …
-
High 7.3
Plone vulnerable to privilege escalation in WebDAV
Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors.
-
High 7.5
An exploitable denial-of-service vulnerability exists in the fabric-worker component of Aerospike Database Server 3.10.…
-
High 8.2
Improper Restriction of XML External Entity Reference in Openpyxl
Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.
-
High 8.8
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…
-
High 7.3
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…
-
High 7.5
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5…
-
High 8.8
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10. …
-
High 8.8
A potential remote code execution vulnerability exists in the PDF parsing functionality of Nitro Pro 10. A specially cr…
-
High 8.8
A remote out of bound write / memory corruption vulnerability exists in the PDF parsing functionality of Nitro Pro 10.5…
-
High 7.5
Jenkins TAP Plugin allows Path Traversal
Directory traversal vulnerability in the TAP plugin before 1.25 in Jenkins allows remote attackers to read arbitrary files via an unspecified parameter.
-
High 7.3
Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection
The Script Security plugin before 1.18.1 in Jenkins might allow remote attackers to bypass a Groovy sandbox protection mechanism via a plugin that performs (1) direct field access or (2) get/set array operations.
-
High 7.5
PEAR core file overwrite vulnerability
PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.
-
High 7.5
archive-tar-minitar and minitar vulnerable to Path Traversal
Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.