Archive
4 April 2017
Vulnerabilities first published on this day (UTC), newest first.
23 results · Feed
-
Unscored —CVE-2016-3740 EPSS 15%
Heap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit Reader 7.3.4.311 allow…
-
Unscored —
The msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router component for the Linux kerne…
-
High 7.5
Apache Geode information disclosure vulnerability
Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL …
-
High 7.5
OpenFlow plugin for OpenDaylight allows spoofing the SDN topology
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to "fake LLDP injection."
-
High 7.5
OpenFlow plugin for OpenDaylight LLDP Relay
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."
-
Medium 5.3
Tryton Information Disclosure Vulnerability
file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.
-
Medium 6.1
Django open redirect
A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.
-
Medium 6.1
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URL…
-
Unscored —
ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic …
-
Unscored —
A missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the ext4 and f2fs filesys…
-
Unscored —
Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physi…
-
Medium 4.6
Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate atta…
-
Medium 6.4
Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically prox…
-
Unscored —
Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for …
-
Unscored —CVE-2017-7228 Public exploit
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The …
-
Unscored —
In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can oc…
-
Unscored —CVE-2017-7398 Public exploit
D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attack…
-
Unscored —CVE-2017-7413 EPSS 39%
In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur …
-
High 8.1
golang.org/x/crypto/ssh Man-in-the-Middle attack
The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.
-
Unscored —
Privilege escalation in IntelHAXM.sys driver in the Intel Hardware Accelerated Execution Manager before version 6.0.6 a…
-
Unscored —
The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem sta…
-
Unscored —CVE-2016-10229 EPSS 13%
udp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP traffic that triggers an…
-
Unscored —
NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executi…