Archive
16 May 2017
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote serve…
-
High 8.8
Cross-Site Request Forgery in Apache CXF Fediz
Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in…
-
Medium —
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2
Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, Spring 3, Jetty 8 and Jetty 9 plugins in Apache CXF Fediz pri…
-
Unscored —
A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that c…
-
Unscored —
Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off b…
-
Unscored —
Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol nu…
-
Unscored —
The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-de…
-
Unscored —
A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could …
-
Unscored —
A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points run…
-
Unscored —
A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, r…
-
Unscored —
A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could a…
-
Unscored —
A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 ca…
-
Unscored —
An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon…
-
Unscored —
An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exp…
-
Unscored —
In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android rele…
-
Unscored —
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux k…
-
Unscored —
In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux ker…
-
Unscored —
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux k…
-
Unscored —
In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android re…
-
Unscored —
In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.
-
Unscored —
In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Lin…
-
Unscored —
In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android relea…
-
Unscored —
In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android release…
-
Unscored —
In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in…
-
Unscored —
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux …
-
Unscored —
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM…
-
Unscored —
In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all And…
-
Unscored —
In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF us…
-
Unscored —
Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for wh…
-
Unscored —
A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padd…
-
Unscored —
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application…
-
Unscored —
In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a pag…
-
Unscored —
The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary …
-
Unscored —
In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel …
-
Unscored —
A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases fr…
-
Unscored —CVE-2017-7952 Public exploit
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
-
Unscored —CVE-2017-7953 Public exploit
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
-
Medium 4.5CVE-2017-8382 Public exploit
admidio CSRF Vulnerability
admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.