Skip to content
OpenAdvisories

Archive

30 March 2017

Vulnerabilities first published on this day (UTC), newest first.

45 results · Feed

  • Unscored —

    The vmw_gb_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.7 …

  • Unscored —

    Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1. Use the default low-privilege credentials to …

  • Unscored —

    In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detect…

  • Unscored —

    In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports w…

  • Unscored —
    CVE-2017-6412 Public exploit

    In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.

  • Unscored —
    CVE-2017-6182 Public exploit EPSS 17%

    In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports w…

  • Unscored —

    A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow remote denial of service.

  • Unscored —

    A vulnerability was discovered in NetIQ Sentinel Server 8.0 before 8.0.1 that may allow leakage of information (account…

  • Unscored —

    vision.c in ImageMagick allows remote attackers to cause a denial of service (infinite loop) via vectors related to "to…

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a craft…

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pdb file.

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a…

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted palm file, a…

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted viff file.

  • Unscored —

    The xwd file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and applic…

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (application crash) via a crafted wpg file.

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file.

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a malformed sun file.

  • Unscored —

    ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a craft…

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted quantum file.

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (segmentation fault and application crash) via a craft…

  • Unscored —

    The dpx file handler in ImageMagick allows remote attackers to cause a denial of service (segmentation fault and applic…

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted wpg file.

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (file descriptor consumption) via a crafted file.

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a …

  • Unscored —

    The pdb coder in ImageMagick allows remote attackers to cause a denial of service (double free) via unspecified vectors.

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted viff file.

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file, a …

  • Unscored —

    ImageMagick allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted ps file.

  • Unscored —

    Heap-based buffer overflow in ImageMagick allows remote attackers to have unspecified impact via a crafted pnm file.

  • Unscored —

    A read-only administrator on Fortinet devices with FortiOS 5.2.x before 5.2.10 GA and 5.4.x before 5.4.2 GA may have ac…

  • Unscored —

    Long lived sessions in Fortinet FortiGate devices with FortiOS 5.x before 5.4.0 could violate a security policy during …

  • Unscored —

    Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is a…

  • Unscored —

    Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable pas…

  • Unscored —

    Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.…

  • Unscored —

    Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden roo…

  • Unscored —

    In the GUI of Ceragon FibeAir IP-10 (before 7.2.0) devices, a remote attacker can bypass authentication by adding an AL…

  • Unscored —

    setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitrary PHP c…

  • Unscored —

    Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerabili…