Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Unscored —
httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for…
-
Unscored —CVE-2017-5899 Public exploit
Directory traversal vulnerability in the setuid root helper binary in S-nail (later S-mailx) before 14.8.16 allows loca…
-
Unscored —
Stack-based buffer overflow in the firmware in Broadcom Wi-Fi HardMAC SoC chips, when the firmware supports CCKM Fast a…
-
Critical 9.8
Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 i…
KEV Nov 3, 2021 -
Unscored —
dotCMS 3.7.0 has XSS reachable from ext/languages_manager/edit_language in portal/layout via the bottom two form fields.
-
Unscored —
Subrion CMS 4.0.5 has CSRF in admin/blog/add/. The attacker can add any tag, and can optionally insert XSS via the tags…
-
High 8.8
Subrion CMS vulnerable to CSRF in admin/blocks/add
Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter.
-
Unscored —
Subrion CMS 4.0.5.10 has SQL injection in admin/database/ via the query parameter.
-
Unscored —
Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS in…
-
Unscored —
Subrion CMS 4.0.5 has CSRF in admin/languages/edit/1/. The attacker can perform any Edit Language action, and can optio…
-
Unscored —
Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field.
-
Unscored —
With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts wi…
-
Medium 5.3
Moodle Global search displays user names for unauthenticated users
In Moodle 3.2.x, global search displays user names for unauthenticated users.
-
Medium 6.1
Moodle XSS in attachments to evidence of prior learning
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
-
Medium 6.1
Moodle XSS Vulnerability
In Moodle 3.x, XSS can occur via evidence of prior learning.
-
Critical 9.8
Moodle SQL injection via user preferences
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
-
Unscored —
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), A…
-
Unscored —
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-…
-
Medium 5.3
Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote …
-
Medium 6.1
Netflix Security Monkey Open Redirect vulnerability
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.
-
Unscored —
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system…
-
Unscored —
The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 doe…
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspe…
-
Unscored —
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 a…
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…
-
Unscored —
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based …
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a c…
-
Unscored —
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspec…
-
Unscored —
tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and…
-
Unscored —
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node d…
-
Unscored —
Huawei AR3200 routers with software before V200R007C00SPC600 allow remote attackers to cause a denial of service or exe…
-
Unscored —
The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service …
-
Unscored —
The processRequest function in minissdpd.c in MiniSSDPd 1.2.20130907-3 allows local users to cause a denial of service …
-
Unscored —
The __read_etc_hosts_r function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a d…
-
Unscored —
The __decode_dotted function in libc/inet/resolv.c in uClibc-ng before 1.0.12 allows remote DNS servers to cause a deni…
-
Unscored —
Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers …
-
Unscored —
The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a den…
-
Unscored —
Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related …
-
Unscored —
Multiple memory leaks in the caption and label handling code in ImageMagick allow remote attackers to cause a denial of…
-
Unscored —
coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.