27 April 2017

20 results · Feed

• Unscored —
  CVE-2017-8305

  The UDFclient (before 0.8.8) custom strlcpy implementation has a buffer overflow. UDFclient's strlcpy is used only on s…

  udfclient Debian
  Apr 27, 2017
• Unscored —
  CVE-2017-8308

  In Avast Antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as Trus…

  Apr 27, 2017
• Unscored —
  CVE-2017-8307

  In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible …

  Apr 27, 2017
• Unscored —
  CVE-2017-8302

  Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/c…

  Apr 27, 2017
• Unscored —
  CVE-2017-8301

  LibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied upon for a later check of…

  libressl Alpine
  Apr 27, 2017
• Medium 5.4
  CVE-2017-8298

  Canvs Canvas Cross-site Scripting (XSS) via title and content fields

  cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts > Add New" action, and during creation of new tags and users.

  austintoddj/canvas Packagist
  Apr 27, 2017
• Unscored —
  CVE-2017-8297

  A path traversal vulnerability exists in simple-file-manager before 2017-04-26, affecting index.php (the sole "Simple P…

  Apr 27, 2017
• Unscored —
  CVE-2017-8296

  kedpm 0.5 and 1.0 creates a history file in ~/.kedpm/history that is written in cleartext. All of the commands performe…

  kedpm Ubuntu
  Apr 27, 2017
• Unscored —
  CVE-2017-5135 Public exploit EPSS 18%

  Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. …

  Apr 27, 2017
• Unscored —
  CVE-2017-3008

  Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier ha…

  Apr 27, 2017
• Critical 9.8
  CVE-2017-3066 Exploited Public exploit EPSS 91%

  Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier ha…

  Apr 27, 2017

  KEV Feb 24, 2025
• Unscored —
  CVE-2017-8294

  libyara/re.c in the regex component in YARA 3.5.0 allows remote attackers to cause a denial of service (out-of-bounds r…

  yara yara Debian Ubuntu
  Apr 27, 2017
• Unscored —
  CVE-2017-5186

  Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch…

  Apr 27, 2017
• Unscored —
  CVE-2017-7415

  Atlassian Confluence 6.x before 6.0.7 allows remote attackers to bypass authentication and read any blog or page via th…

  Apr 27, 2017
• Unscored —
  CVE-2017-8289

  Stack-based buffer overflow in the ipv6_addr_from_str function in sys/net/network_layer/ipv6/addr/ipv6_addr_from_str.c …

  Apr 27, 2017
• High 7.8
  CVE-2017-8291 Exploited Public exploit EPSS 97%

  Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…

  ghostscript ghostscript ghostscript Debian Ubuntu Alpine
  Apr 27, 2017

  KEV May 24, 2022
• Unscored —
  CVE-2017-6037

  A Heap-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vulne…

  Apr 27, 2017
• Unscored —
  CVE-2017-6035

  A Stack-Based Buffer Overflow issue was discovered in Wecon Technologies LEVI Studio HMI Editor before 1.8.1. This vuln…

  Apr 27, 2017
• Unscored —
  CVE-2017-8288

  gnome-shell 3.22 through 3.24.1 mishandles extensions that fail to reload, which can lead to leaving extensions enabled…

  gnome-shell gnome-shell Debian Ubuntu
  Apr 27, 2017
• Unscored —
  CVE-2017-8287

  FreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_builde…

  freetype freetype freetype Debian Ubuntu Alpine
  Apr 27, 2017