Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
149 results · Clear filters · Feed
-
Unscored —
The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast net…
-
Unscored —CVE-2017-6823 Public exploit
Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an ap…
-
Critical 9.8
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted …
KEV Nov 3, 2021 -
Unscored —
In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, lead…
-
Unscored —CVE-2017-6427 Public exploit
A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will c…
-
Unscored —
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP ser…
-
Unscored —
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution throu…
-
Unscored —CVE-2017-6529 Public exploit
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID p…
-
Unscored —CVE-2017-6528 Public exploit
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna…
-
Unscored —
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal at…
-
Unscored —CVE-2017-6549 Public exploit
Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66…
-
Unscored —CVE-2017-6552 Public exploit
Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing…
-
Unscored —CVE-2017-6547 Public exploit
Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-A…
-
Unscored —
Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-A…
-
Unscored —
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vul…
-
Unscored —CVE-2017-0505 Public exploit
An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen dri…
-
Unscored —CVE-2017-0478 Public exploit
A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted f…
-
Unscored —CVE-2017-2636 Public exploit
Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or caus…
-
Unscored —
Portable UPnP SDK (aka libupnp) before 1.6.21 allows remote attackers to write to arbitrary files in the webroot via a …
-
Unscored —CVE-2016-8863 Public exploit
Heap-based buffer overflow in the create_url_list function in gena/gena_device.c in Portable UPnP SDK (aka libupnp) bef…
-
Unscored —CVE-2017-6411 Public exploit
Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or f…
-
Unscored —CVE-2017-5633 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities on the D-Link DI-524 Wireless Router with firmware 9.01 allo…
-
Unscored —
An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to ar…
-
Unscored —CVE-2017-6351 Public exploit
The WePresent WiPG-1500 device with firmware 1.0.3.7 has a manufacturer account that has a hardcoded username / passwor…
-
High 8.8
dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute a…
KEV Mar 25, 2022 -
Unscored —
paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
-
Unscored —
MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a …
-
Unscored —CVE-2016-10204 Public exploit
SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2017-6104 Public exploit
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.