Archive
24 March 2017
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 doe…
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspe…
-
Unscored —
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 a…
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…
-
Unscored —
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based …
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspec…
-
Unscored —
tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and…
-
Unscored —
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node d…
-
Unscored —
Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or exe…
-
Unscored —
The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service …
-
Unscored —
The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service …
-
Unscored —
The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a d…
-
Unscored —
The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a deni…
-
Unscored —
Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers …
-
Unscored —
The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a den…
-
Unscored —
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related …
-
Unscored —
Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of…
-
Unscored —
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.
-
Unscored —
regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and cra…
-
Unscored —
The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the…
-
Unscored —
Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgi…
-
Unscored —
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter. Some…
-
Unscored —
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. So…
-
Unscored —
An issue was discovered on Miele Professional PST10 devices. The corresponding embedded webserver "PST10 WebServer" typ…
-
Unscored —
Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sendin…
-
Unscored —
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. So…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers a…
-
Unscored —
The stream reading functions in lib/opencdk/read-packet.c in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allow remote a…
-
Unscored —
Heap-based buffer overflow in the PushQuantumPixel function in ImageMagick before 6.9.7-3 and 7.x before 7.0.4-3 allows…
-
Unscored —
Memory leak in coders/mpc.c in ImageMagick before 6.9.7-4 and 7.x before 7.0.4-4 allows remote attackers to cause a den…
-
Unscored —
Stack-based buffer overflow in the cdk_pk_get_keyid function in lib/opencdk/pubkey.c in GnuTLS before 3.3.26 and 3.5.x …
-
Unscored —
Double free vulnerability in magick/profile.c in ImageMagick allows remote attackers to have unspecified impact via a c…
-
Unscored —
Multiple heap-based buffer overflows in the read_attribute function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 allo…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers a…
-
Unscored —CVE-2017-5334 EPSS 33%
Double free vulnerability in the gnutls_x509_ext_import_proxy function in GnuTLS before 3.3.26 and 3.5.x before 3.5.8 a…
-
Unscored —
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which tr…
-
Unscored —
Local privilege escalation vulnerability in the Gentoo QEMU package before 2.5.0-r1.
-
Unscored —
The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230,…
-
High 7.5
Pysaml2 does not sanitize XML responses
XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.