Skip to content
OpenAdvisories

Archive

10 March 2017

Vulnerabilities first published on this day (UTC), newest first.

24 results · Feed

  • High 7.5

    An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language ver…

  • Unscored —

    An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed …

  • Unscored —

    A cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1 allows remote attackers to…

  • Unscored —

    partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validat…

  • Unscored —

    An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFP…

  • Unscored —

    An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during …

  • Unscored —
    CVE-2017-6506 Public exploit EPSS 12%

    In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, lead…

  • Unscored —
    CVE-2017-6427 Public exploit

    A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will c…

  • Unscored —

    Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute …

  • Critical 10.0

    An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A sp…

  • Critical 9.0

    A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially craf…

  • Critical 10.0

    A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially craf…

  • Medium 5.3

    A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A…

  • Unscored —

    On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the devi…

  • Unscored —

    Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, i…

  • Unscored —

    Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local gue…

  • Unscored —

    The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of…

  • Unscored —

    Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause…

  • Unscored —

    gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer de…

  • Unscored —

    Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentatio…

  • Unscored —

    The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or …

  • High 7.5

    Cloud Foundry denial of service vulnerability

    An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.

  • Unscored —
    CVE-2017-6465 Public exploit EPSS 50%

    Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP ser…

  • Unscored —

    A cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 …