Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Critical 9.8
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted …
KEV Nov 3, 2021 -
High 7.5
An exploitable buffer overflow vulnerability exists in the LoadEncoding functionality of the R programming language ver…
-
Unscored —
An issue was discovered in ytnef before 1.9.2. There is a potential heap-based buffer over-read on incoming Compressed …
-
Unscored —
A cross-site scripting (XSS) vulnerability in view_filters_page.php in MantisBT before 2.2.1 allows remote attackers to…
-
Unscored —
partclone.chkimg in partclone 0.2.89 is prone to a heap-based buffer overflow vulnerability due to insufficient validat…
-
Unscored —
An issue was discovered in ytnef before 1.9.2. There is a potential out-of-bounds access with fields of Size 0 in TNEFP…
-
Unscored —
An issue was discovered in ytnef before 1.9.2. An invalid memory access (heap-based buffer over-read) can occur during …
-
Unscored —
In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, lead…
-
Unscored —CVE-2017-6427 Public exploit
A Buffer Overflow was discovered in EvoStream Media Server 1.7.1. A crafted HTTP request with a malicious header will c…
-
Unscored —
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute …
-
Critical 10.0
An exploitable buffer overflow exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A sp…
-
Critical 9.0
A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially craf…
-
Critical 10.0
A buffer overflows exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A specially craf…
-
Medium 5.3
A denial of service vulnerability exists in the psnotifyd application of the Pharos PopUp printer client version 9.0. A…
-
Unscored —
On Cambium Networks cnPilot R200/201 devices before 4.3, there is a vulnerability involving the certificate of the devi…
-
Unscored —
Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, i…
-
Unscored —
Integer overflow in the vrend_create_shader function in vrend_renderer.c in virglrenderer before 0.6.0 allows local gue…
-
Unscored —
The make_available_at_least function in io-tiff.c in gdk-pixbuf allows context-dependent attackers to cause a denial of…
-
Unscored —
Integer underflow in the load_resources function in io-icns.c in gdk-pixbuf allows context-dependent attackers to cause…
-
Unscored —
gdk-pixbuf-thumbnailer.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (NULL pointer de…
-
Unscored —
Integer overflow in io-ico.c in gdk-pixbuf allows context-dependent attackers to cause a denial of service (segmentatio…
-
Unscored —
The TCP/IP networking module in Unisys ClearPath MCP systems with TCP-IP-SW 57.1 before 57.152, 58.1 before 58.142, or …
-
High 7.5
Cloud Foundry denial of service vulnerability
An issue was discovered in Cloud Foundry release v247 through v252, UAA stand-alone release v3.9.0 through v3.11.0, and UAA Bosh Release v21 through v26. There is a potential to subject the UAA OAuth clients to a denial of service attack.
-
Unscored —
Remote Code Execution was discovered in FTPShell Client 6.53. By default, the client sends a PWD command to the FTP ser…
-
Unscored —
A cross-site scripting (XSS) vulnerability in bug_change_status_page.php in MantisBT before 1.3.7 and 2.x before 2.2.1 …
-
Medium 6.1
django-epiceditor vulnerable to XSS in form field
There is a cross-site scripting vulnerability in django-epiceditor 0.2.3 via crafted content in a form field.
-
Unscored —
An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS…
-
Medium 6.1
EpicEditor XSS Vulnerability
EpicEditor through 0.2.3 has Cross-Site Scripting because of an insecure default marked.js configuration. An example attack vector is a crafted IMG element in an HTML document.
-
Unscored —
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to unauthenticated command execution throu…
-
Unscored —CVE-2017-6529 Public exploit
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to session hijacking by guessing the UID p…
-
Unscored —CVE-2017-6528 Public exploit
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is affected by plaintext password storage (the /home/dna…
-
Unscored —
An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLIMS is vulnerable to a NUL-terminated directory traversal at…
-
Unscored —
An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices. The Dahua DVR Protocol, which…
-
Unscored —
Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authentic…
-
Unscored —
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —CVE-2017-6549 Public exploit
Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66…
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —CVE-2017-6552 Public exploit
Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing…