Archive
8 May 2017
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vuln…
-
Unscored —
Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading…
-
Unscored —
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search mod…
-
Unscored —
Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical …
-
Unscored —
Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrus…
-
Unscored —
Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logge…
-
Unscored —
Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password w…
-
Unscored —
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases ear…
-
Unscored —
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including…
-
Unscored —
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denia…
-
Unscored —
An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior. The…
-
Unscored —CVE-2017-6953 Public exploit
Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new car…
-
Unscored —
Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.
-
Unscored —
A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailC…
-
Unscored —
The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (he…
-
Unscored —
The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denia…
-
Unscored —
The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a den…
-
Unscored —
The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service…
-
Unscored —
The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of servic…
-
Unscored —
The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denia…
-
Unscored —
Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a re…
-
Unscored —
Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's…
-
Unscored —
Allen Disk 1.6 has XSS in the id parameter to downfile.php.
-
Unscored —
In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory l…
-
Critical 9.1
GeniXCMS Arbitrary User Password Reset Vulnerability
forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.
-
Unscored —
The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local…