Archive
April 2017
Vulnerabilities first published in this month (UTC), newest first.
165 results · Clear filters · Feed
-
Unscored —CVE-2017-8367 Public exploit
Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy A…
-
Unscored —
Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project …
-
Unscored —
Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain ful…
-
Unscored —
Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. …
-
Critical 9.8
Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier ha…
KEV Feb 24, 2025 -
High 7.8
Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion…
KEV May 24, 2022 -
Unscored —CVE-2017-7293 Public exploit
The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user t…
-
Unscored —CVE-2017-8222 Public exploit
Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate s…
-
Unscored —CVE-2017-8224 Public exploit
Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET.
-
Unscored —
On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An…
-
Unscored —CVE-2017-8221 Public exploit
Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communicat…
-
Unscored —CVE-2017-8223 Public exploit
On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streami…
-
Unscored —CVE-2017-1274 Public exploit
IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated…
-
Unscored —CVE-2017-7221 Public exploit
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote au…
-
Unscored —CVE-2017-3563 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —CVE-2017-3587 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported v…
-
Unscored —CVE-2017-3622 Public exploit
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (…
-
Unscored —CVE-2017-3546 Public exploit
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChan…
-
Unscored —CVE-2017-3575 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —CVE-2017-3576 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions …
-
Unscored —
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported v…
-
Unscored —
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integrati…
-
Unscored —
Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (l…
-
High 7.4
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…
KEV Jun 3, 2024 -
Unscored —CVE-2017-3561 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —CVE-2017-3558 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…
-
Unscored —
Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). Su…
-
Unscored —CVE-2015-7570 Public exploit
Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbo…
-
Unscored —CVE-2015-7568 Public exploit
SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the …
-
Unscored —
Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remo…
-
Unscored —CVE-2015-7569 Public exploit
SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary …
-
Unscored —
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root acco…
-
Unscored —
D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, an…
-
Unscored —CVE-2016-4313 Public exploit
Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitr…
-
Unscored —CVE-2017-7852 Public exploit
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to acces…
-
Unscored —CVE-2015-0104 Public exploit
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database…
-
Unscored —CVE-2015-0107 Public exploit
IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database…
-
Unscored —CVE-2017-8056 Public exploit
WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC …
-
Unscored —
ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, whi…