Archive
22 May 2017
Vulnerabilities first published on this day (UTC), newest first.
127 results · Feed
-
Unscored —CVE-2017-9150 Public exploit
The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks valu…
-
Unscored —
IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate …
-
Unscored —
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embe…
-
Unscored —
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system …
-
Unscored —
IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A re…
-
Unscored —
IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to emb…
-
Unscored —
IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redir…
-
Unscored —
Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited t…
-
Unscored —
Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation f…
-
Unscored —
The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value befor…
-
Unscored —CVE-2017-9147 Public exploit
LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to ca…
-
High 8.0
Apache Archiva vulnerable to Cross Site Request Forgery
Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks. A malicious site opened in the same browser as the archiva site, may send an HTML response that performs arbitrary actions on archiva service…
-
Unscored —
Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges v…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hija…
-
Unscored —
SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 all…
-
Unscored —
Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privi…
-
Unscored —
The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Cl…
-
Unscored —
Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions pr…
-
Unscored —
Untrusted search path vulnerability in The installer of e-Tax Software all versions allows remote attackers to gain pri…
-
Unscored —
Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium…
-
Unscored —
FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series…
-
Unscored —
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form M…
-
Unscored —
Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inje…
-
Unscored —
Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gai…
-
Unscored —
Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated att…
-
Unscored —
FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series…
-
Unscored —
Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows …
-
Unscored —CVE-2017-4916 Public exploit
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succe…
-
Unscored —CVE-2017-4915 Public exploit
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fi…
-
Unscored —
In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory…
-
Unscored —
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function…
-
Unscored —
In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/b…
-
Unscored —
In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
-
Unscored —CVE-2017-6997 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "802.1X" co…
-
Unscored —CVE-2017-6989 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvO…
-
Unscored —CVE-2017-6979 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "HFS" compo…