Archive
13 April 2017
Vulnerabilities first published on this day (UTC), newest first.
77 results · Feed
-
Unscored —
Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users…
-
Medium 6.1
ember-source Cross-site Scripting vulnerability
Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script…
-
Medium 5.3
SaltStack has insecure /tmp file handling in salt/modules/chef.py
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
-
Medium 5.3
Salt improper handling of tmp files
modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
-
Unscored —
Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for …
-
Unscored —
Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attacke…
-
Unscored —CVE-2015-8284 Public exploit
SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.
-
Unscored —CVE-2015-8283 Public exploit
Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.
-
Unscored —CVE-2015-8282 Public exploit
SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.
-
Unscored —
RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash).
-
Unscored —
The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (inv…
-
Unscored —
Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users…
-
Unscored —
The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
-
Unscored —
InspIRCd before 2.0.7 allows remote attackers to cause a denial of service (infinite loop).
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and earlier allow remote attack…
-
Unscored —
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
-
Unscored —CVE-2016-1915 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4…
-
Unscored —CVE-2016-1914 Public exploit
Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Serve…
-
Critical 9.8
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass protected resource restrictions and other security constraints via a URL with certain escaped characters, related to backsl…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attacke…
-
High 7.5CVE-2016-4970 EPSS 11%
Loop with Unreachable Exit Condition in Netty
handler/ssl/OpenSslEngine.java in Netty 4.0.x before 4.0.37.Final and 4.1.x before 4.1.1.Final allows remote attackers to cause a denial of service (infinite loop).
-
Unscored —
SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, a…
-
Unscored —
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Red Hat Satellite 5 allow remote attackers to inject arbitrary w…
-
Unscored —
SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arb…
-
Unscored —
Firejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.
-
Unscored —
Firejail does not restrict access to --tmpfs, which allows local users to gain privileges, as demonstrated by mounting …
-
Unscored —
Firejail does not properly clean environment variables, which allows local users to gain privileges.
-
Unscored —
Firejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local users to gain privile…
-
Unscored —
Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /.
-
Unscored —
Firejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var/lock, which allows local…
-
Unscored —
Firejail allows --chroot when seccomp is not supported, which might allow local users to gain privileges.
-
Unscored —
A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 be…
-
Unscored —
The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats v…
-
Unscored —
The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).
-
Unscored —
The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missi…