18 April 2017

14 results · Feed

• High 7.8
  CVE-2016-10345

  Phusion Passenger uses a known /tmp filename

  In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the privileges of the passenger user.

  passenger passenger passenger Debian Ubuntu RubyGems
  Apr 18, 2017
• Unscored —
  CVE-2017-7946

  The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial …

  radare2 Ubuntu
  Apr 18, 2017
• Unscored —
  CVE-2017-7942

  The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available mem…

  imagemagick Debian
  Apr 18, 2017
• Unscored —
  CVE-2017-7941

  The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available mem…

  imagemagick imagemagick Debian Ubuntu
  Apr 18, 2017
• Unscored —
  CVE-2017-7939

  The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers t…

  Apr 18, 2017
• Unscored —
  CVE-2017-7940

  The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to c…

  Apr 18, 2017
• Unscored —
  CVE-2017-7943

  The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available mem…

  imagemagick imagemagick Debian Ubuntu
  Apr 18, 2017
• Medium 6.1
  CVE-2017-7897

  MantisBT XSS via my_view_page.php and view_user_page.php

  A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit…

  mantisbt/mantisbt Packagist
  Apr 18, 2017
• High 7.5
  CVE-2017-5656

  Session Fixation in Apache CXF

  Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker could craft a token which would return an identifer corresponding to a cached token for another user.

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Apr 18, 2017
• Medium 5.3
  CVE-2017-5653 EPSS 11%

  Improper Certificate Validation in Apache CXF

  JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.

  Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  Apr 18, 2017
• Unscored —
  CVE-2017-7896 Public exploit

  Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

  Apr 18, 2017
• Unscored —
  CVE-2017-7645

  The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a den…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Apr 18, 2017
• High 7.3
  CVE-2017-5661

  Improper Restriction of XML External Entity Reference in Apache FOP

  In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is …

  Apache Software Foundation Apache FOP fop fop Debian Ubuntu Maven
  Apr 18, 2017
• High 7.3
  CVE-2017-5662

  Improper Restriction of XML External Entity Reference in Apache Batik

  In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application…

  Apache Software Foundation Apache Batik batik batik Debian Ubuntu Maven
  Apr 18, 2017