Archive
11 April 2017
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Unscored —
Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.1…
-
Unscored —
In libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in src_sinc.c via a crafted…
-
Unscored —
Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php[space]' file, they cou…
-
Unscored —
A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0.
-
Unscored —
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Se…
-
Unscored —CVE-2015-7893 Public exploit
SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary Java…
-
Unscored —
Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cau…
-
Unscored —
Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator.
-
Unscored —
Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exce…
-
Unscored —
Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulat…
-
Unscored —
A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.
-
Unscored —
The JPEG decoder in ImageMagick before 6.8.9-9 allows local users to cause a denial of service (out-of-bounds memory ac…
-
Unscored —
PCX parser code in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
-
Unscored —
The HorizontalFilter function in resize.c in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of se…
-
Unscored —
DCM decode in ImageMagick before 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds read).
-
Unscored —
coders/pnm.c in ImageMagick 6.9.0-1 Beta and earlier allows remote attackers to cause a denial of service (crash) via a…
-
Unscored —
setroubleshoot allows local users to bypass an intended container protection mechanism and execute arbitrary commands b…
-
Unscored —
The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execsta…
-
Unscored —
The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands …
-
Unscored —
The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggerin…
-
Unscored —
The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2017-6088 Public exploit
Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to e…
-
Unscored —
The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute …
-
Unscored —
The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial…
-
Unscored —
libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereferenc…
-
Unscored —CVE-2016-4468 Public exploit
SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and …
-
Unscored —
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate a…
-
Unscored —
Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI sc…
-
Unscored —
Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware L…
-
Unscored —
Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gai…
-
Unscored —
Kony Enterprise Mobile Management (EMM) before 4.2.5.2 has the vulnerability of disclosing the private key in clear-tex…
-
Unscored —
The TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2, when configured as a SAM…
-
High 8.8
Insecure Inherited Permissions in Apache Hadoop
In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user.
-
Unscored —
Symantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is susceptible to a denial-…
-
Unscored —
Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to sen…
-
Critical 9.8CVE-2016-1908 EPSS 14%
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the loc…