Archive
May 2017
Vulnerabilities first published in this month (UTC), newest first.
1,010 results · Feed
-
Unscored —
In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files…
-
Unscored —
In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialo…
-
Unscored —
In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF.
-
Unscored —
In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.
-
Unscored —
In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.
-
Unscored —
In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an in…
-
Unscored —
Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed versions are MOVEit Tr…
-
Unscored —
Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documen…
-
Unscored —
A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU …
-
High 7.5
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey functio…
-
Unscored —
An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_for…
-
High 7.5
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementCont…
-
Unscored —
libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk fu…
-
Unscored —
The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service (resource c…
-
Unscored —
A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in vali…
-
Unscored —
In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SI…
-
High 7.5
Out-of-bounds read in nokogiri
libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of an incomplete fix f…
-
Unscored —
The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.…
-
Unscored —
An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_re…
-
Unscored —
An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were…
-
Unscored —
An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte poi…
-
Unscored —
GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra…
-
Unscored —
readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow r…
-
Unscored —
GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application …
-
Unscored —
GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with…
-
Unscored —
GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra…
-
Unscored —
The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause …
-
Unscored —
readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attacke…
-
Unscored —
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspec…
-
Unscored —
Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain p…
-
Unscored —CVE-2017-4011 Scanner template
Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x …
-
Unscored —
Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers …
-
Unscored —
User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view …
-
Unscored —
Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticate…
-
Unscored —
Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote auth…
-
Unscored —
Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote auth…
-
Unscored —
perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current worki…
-
Unscored —
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which t…
-
Unscored —
Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable…
-
Unscored —
Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for Wo…