Archive
20 March 2017
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Unscored —
XML entity injection in Junos Space before 15.2R2 allows attackers to cause a denial of service.
-
Unscored —
Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to…
-
Unscored —
Cross site request forgery vulnerability in Junos Space before 15.2R2 allows remote attackers to perform certain admini…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Junos Space before 15.2R2 allows remote attackers to steal sensitive inform…
-
Unscored —
Command injection vulnerability in Junos Space before 15.2R2 allows attackers to execute arbitrary code as a root user.
-
Unscored —
Insufficient validation of SSH keys in Junos Space before 15.2R2 allows man-in-the-middle (MITM) type of attacks while …
-
High 7.1
Improper Input Validation in Apache Tomcat
The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, 7.0.0 to 7.0.72, and 6.0.0 to 6.0.47 that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted…
-
Unscored —
hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MA…
-
Unscored —
The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent attackers to c…
-
Unscored —
Integer overflow in the _IO_wstr_overflow function in libio/wstrops.c in the GNU C Library (aka glibc or libc6) before …
-
Unscored —
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might …
-
Unscored —
The pop_fail_stack function in the GNU C Library (aka glibc or libc6) allows context-dependent attackers to cause a den…
-
Unscored —
Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file.
-
Unscored —
Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have uns…
-
Unscored —
ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).
-
Unscored —
Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a den…
-
Unscored —
The ReadDIBImage function in coders/dib.c in ImageMagick allows remote attackers to cause a denial of service (crash) v…
-
Unscored —
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).
-
Unscored —
Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).
-
Unscored —
The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
-
Unscored —
The ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (…
-
Unscored —
Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).
-
Unscored —
The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact vi…
-
Unscored —
The DecodePSDPixels function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact …
-
Unscored —
The permission control module in Huawei Document Security Management (aka DSM) before V100R002C05SPC670 allows remote a…
-
Unscored —
An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user cred…
-
Unscored —
IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload i…
-
Unscored —
The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unifie…
-
Unscored —
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, …
-
Unscored —
An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking A…
-
Unscored —
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…
-
Unscored —
Memory leak in the virgl_resource_attach_backing function in virglrenderer before 0.6.0 allows local guest OS users to …
-
Unscored —
The Qualcomm SPCom driver in Android before 7.0 allows local users to execute arbitrary code within the context of the …
-
Unscored —
IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Associati…
-
Unscored —
IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed …
-
Unscored —
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's re…
-
Unscored —
IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a…
-
Unscored —
IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM…
-
Unscored —
Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allo…
-
Unscored —
Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a …