Archive
5 April 2017
Vulnerabilities first published on this day (UTC), newest first.
34 results · Feed
-
Unscored —
AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface.…
-
Unscored —
The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers…
-
Unscored —CVE-2017-7447 Public exploit
HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code.
-
Unscored —CVE-2017-7446 Public exploit
HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.
-
Unscored —
In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, wh…
-
Unscored —
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share…
-
Unscored —
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permiss…
-
Unscored —
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permi…
-
Unscored —
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top nav…
-
Unscored —
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing…
-
Unscored —
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application l…
-
Unscored —
In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker …
-
Unscored —
apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, rel…
-
Unscored —
IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IB…
-
Unscored —
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Unscored —
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Unscored —
The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions the…
-
Unscored —
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
-
Unscored —
coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted s…
-
Unscored —CVE-2017-6339 Public exploit
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate …
-
Unscored —CVE-2017-6340 Public exploit
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/repo…
-
Unscored —CVE-2017-6338 Public exploit
Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow…
-
Unscored —CVE-2016-9091 Public exploit
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are sus…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execu…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local m…
-
Unscored —
An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to acces…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execu…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to exec…
-
Unscored —
An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to acces…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execu…
-
Unscored —
Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access…
-
Unscored —
On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authe…
-
Unscored —CVE-2017-7358 Public exploit
In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitra…
-
Unscored —CVE-2017-2671 Public exploit
The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock …