Archive
14 March 2017
Vulnerabilities first published on this day (UTC), newest first.
64 results · Feed
-
Unscored —
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability in the ActionScript…
-
Unscored —
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable use after free vulnerability related to garbage …
-
Unscored —
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime…
-
Unscored —
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable memory corruption vulnerability in the Primetime…
-
Unscored —
Adobe Flash Player versions 24.0.0.221 and earlier have an exploitable buffer overflow / underflow vulnerability in the…
-
Unscored —
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Success…
-
Unscored —
BitlBee before 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) and possib…
-
Unscored —
The unreorder_channels function in cli/wvunpack.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of …
-
Unscored —
The read_code function in read_words.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service (ou…
-
Unscored —
The read_new_config_info function in open_utils.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of …
-
Unscored —
Use-after-free vulnerability in bitlbee-libpurple before 3.5 allows remote servers to cause a denial of service (crash)…
-
Unscored —
The WriteCaffHeader function in cli/caff.c in Wavpack before 5.1.0 allows remote attackers to cause a denial of service…
-
Unscored —
The QuantumTransferMode function in coders/tiff.c in GraphicsMagick 1.3.25 and earlier allows remote attackers to cause…
-
Unscored —
bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash…
-
Unscored —
Stack-based buffer overflow in the vrend_decode_set_framebuffer_state function in vrend_decode.c in virglrenderer befor…
-
Unscored —
Buffer overflow in Broadcom ACSD allows remote attackers to execute arbitrary code via a long string to TCP port 5916. …
-
Unscored —
An issue was discovered in Telegram Messenger 2.6 for iOS and 1.8.2 for Android. Secret chat messages are available in …
-
High 7.5
Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
An information disclosure issue was discovered in Apache Tomcat 8.5.7 to 8.5.9 and 9.0.0.M11 to 9.0.0.M15 in reverse-proxy configurations. Http11InputBuffer.java allows remote attackers to read data that was intended to be associated with a different request.
-
Unscored —
An issue was discovered in Eaton xComfort Ethernet Communication Interface (ECI) Versions 1.07 and prior. By accessing …
-
Unscored —CVE-2017-6367 Public exploit
In Cerberus FTP Server 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack methodology inv…
-
Unscored —
Cross-site scripting (XSS) vulnerability in SVG file handling in Lutim 0.7.1 and earlier allows remote attackers to inj…
-
Unscored —
The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows, when the gflags app is ena…
-
Unscored —
Race condition in kernel/ucount.c in the Linux kernel through 4.10.2 allows local users to cause a denial of service (u…
-
Unscored —
An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user…