Archive
May 2017
Vulnerabilities first published in this month (UTC), newest first.
1,010 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 …
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Pa…
-
Unscored —CVE-2017-8849 Public exploit
smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount he…
-
Unscored —CVE-2017-8422 Public exploit
KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and l…
-
Unscored —
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack th…
-
Unscored —
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value ba…
-
Unscored —
The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a…
-
Unscored —
Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote una…
-
Unscored —
Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote un…
-
Unscored —
Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote serve…
-
High 8.8
Cross-Site Request Forgery in Apache CXF Fediz
Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that allows clients to be created, deleted, etc. A CSRF (Cross Style Request Forgery) style vulnerability has been found in…
-
Medium —
Moderate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring2
Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. A CSRF (Cross Style Request Forgery) style vulnerability has been found in the Spring 2, Spring 3, Jetty 8 and Jetty 9 plugins in Apache CXF Fediz pri…
-
Unscored —
A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that c…
-
Unscored —
Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. The size was off b…
-
Unscored —
Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether type and IP protocol nu…
-
Unscored —
The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-de…
-
Unscored —
A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could …
-
Unscored —
A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points run…
-
Unscored —
A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, r…
-
Unscored —
A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could a…
-
Unscored —
A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 ca…
-
Unscored —
An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon…
-
Unscored —
An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exp…
-
Unscored —
In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android rele…
-
Unscored —
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux k…
-
Unscored —
In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux ker…
-
Unscored —
In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux k…
-
Unscored —
In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android re…
-
Unscored —
In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.
-
Unscored —
In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Lin…
-
Unscored —
In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android relea…
-
Unscored —
In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android release…
-
Unscored —
In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in…
-
Unscored —
In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux …
-
Unscored —
A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM…
-
Unscored —
In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all And…
-
Unscored —
In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF us…
-
Unscored —
Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for wh…
-
Unscored —
A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padd…
-
Unscored —
If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application…