Archive
6 April 2017
Vulnerabilities first published on this day (UTC), newest first.
32 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote authenticated users to inject ar…
-
Unscored —
Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to i…
-
Unscored —
DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and pass…
-
Unscored —
Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code tha…
-
Critical 9.8
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files
Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.
-
Critical 9.8
Apache Tomcat Improper Access Control vulnerability
Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this lis…
KEV May 12, 2023 -
Critical 9.8
Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection pas…
-
Critical 10.0
Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-k…
-
Unscored —
The high level operating systems (HLOS) was not providing sufficient memory address information to ensure that secure a…
-
Unscored —
Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary…
-
Unscored —
A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller…
-
Unscored —
A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an …
-
Unscored —
textract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process function. This may be…
-
Unscored —
The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a depre…
-
Unscored —
A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express…
-
Unscored —
A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthen…
-
Unscored —
In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging t…
-
Unscored —CVE-2017-7571 Public exploit
public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.
-
High 8.8
A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vu…
KEV Sep 18, 2023 -
Unscored —
MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.
-
Unscored —
In ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying unexpectedly large data into…
-
Unscored —CVE-2017-7237 Public exploit
The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spicewo…
-
Unscored —
Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrar…
-
Unscored —
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. T…
-
Unscored —
F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modificat…
-
Unscored —
WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certVali…
-
Unscored —
F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) atta…
-
Unscored —
GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified ve…
-
Unscored —
WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (…
-
Unscored —
The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attacker…
-
Unscored —
The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to…
-
Unscored —
The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to…