Archive
May 2017
Vulnerabilities first published in this month (UTC), newest first.
105 results · Clear filters · Feed
-
Unscored —CVE-2017-2522 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvO…
-
Unscored —CVE-2017-2501 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvO…
-
Unscored —CVE-2017-2531 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvO…
-
Unscored —CVE-2017-2509 Public exploit
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" co…
-
Unscored —
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The…
-
Unscored —CVE-2017-2524 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvO…
-
Unscored —CVE-2017-2528 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The…
-
Unscored —CVE-2017-2516 Public exploit
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" co…
-
Unscored —CVE-2017-2533 Public exploit
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "DiskArbitr…
-
Unscored —CVE-2017-2510 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The…
-
Unscored —CVE-2017-2514 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. The…
-
Unscored —CVE-2017-2515 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvO…
-
Unscored —
import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the Use…
-
Medium 6.5CVE-2017-7620 Public exploit
MantisBT vulnerable to CSRF and Open Redirect attacks
MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a backslash check in string_api.php and consequently has conflicting interpretations of an initial \/ substring as introducing either a local pathname or a remote hostname, which leads to …
-
Unscored —
Secure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3.0, has a Directory Tr…
-
Unscored —
HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default i…
-
Unscored —
PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed. sendfromfil…
-
Unscored —
A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal Data…
-
Unscored —
A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A stack-based buffer overf…
-
Unscored —
An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12. An authenticati…
-
Unscored —
An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EF…
-
Unscored —
A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote …
-
Unscored —
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspec…
-
Unscored —CVE-2017-8849 Public exploit
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount he…
-
Unscored —CVE-2017-8422 Public exploit
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and l…
-
Unscored —
The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-de…
-
Unscored —
The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary …
-
Unscored —CVE-2017-7952 Public exploit
INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
-
Unscored —CVE-2017-7953 Public exploit
INFOR EAM V11.0 Build 201410 has XSS via comment fields.
-
Medium 4.5CVE-2017-8382 Public exploit
admidio CSRF Vulnerability
admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.
-
Unscored —
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large contro…
-
Unscored —CVE-2017-8926 Public exploit
Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspec…
-
Unscored —CVE-2017-8927 Public exploit
Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified…
-
Unscored —CVE-2017-8928 Public exploit
mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.
-
Unscored —CVE-2016-10277 Public exploit
An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execut…
-
Unscored —CVE-2017-0175 Public exploit
The Windows kernel in Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows authenticated attackers to obtain se…
-
Unscored —CVE-2017-0214 Public exploit
Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R…
-
Medium —CVE-2017-0248 Public exploit
Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core
Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."
-
Unscored —CVE-2017-0259 Public exploit
The Windows kernel in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703,…
-
High 7.8
Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the softwa…
KEV Mar 3, 2022