Archive
May 2017
Vulnerabilities first published in this month (UTC), newest first.
105 results · Clear filters · Feed
-
Critical 9.8
Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, all…
KEV Mar 30, 2023 -
Critical 9.8
Juju uses a UNIX domain socket without setting appropriate permissions
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
High 7.8
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
KEV Mar 3, 2022 -
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —CVE-2016-6256 Public exploit
SAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE) attacks via crafted XML…
-
High 8.8
Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the…
-
High 8.1CVE-2017-2800 Public exploit
A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resultin…
-
Unscored —
An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A speci…
-
Unscored —CVE-2017-8311 Public exploit
Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an inp…
-
High 8.3CVE-2017-2793 Public exploit
An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFil…
-
Unscored —
Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugi…
-
Unscored —
Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attac…
-
Unscored —
The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the ema…
-
Unscored —CVE-2017-9150 Public exploit
The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks valu…
-
Unscored —
IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system …
-
Unscored —CVE-2017-9147 Public exploit
LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to ca…
-
Unscored —CVE-2017-4916 Public exploit
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succe…
-
Unscored —CVE-2017-4915 Public exploit
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fi…
-
Unscored —CVE-2017-6997 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —CVE-2017-6989 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —CVE-2017-6979 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvO…
-
Unscored —CVE-2017-6982 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. The issue involves the "Notifications…
-
Unscored —CVE-2017-6996 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —CVE-2017-6998 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —CVE-2017-6994 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —CVE-2017-6999 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —CVE-2017-6978 Public exploit
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Accessibil…
-
Unscored —CVE-2017-6995 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. tvOS before 10.2.1 is affected. watch…
-
Unscored —CVE-2017-6984 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. iTu…
-
Unscored —CVE-2017-6980 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvO…
-
Unscored —CVE-2017-2504 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvO…
-
Unscored —CVE-2017-2527 Public exploit
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "CoreAnimat…
-
Unscored —CVE-2017-2521 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvO…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvO…
-
Unscored —CVE-2017-2508 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The…