Archive
7 June 2017
Vulnerabilities first published on this day (UTC), newest first.
59 results · Feed
-
Unscored —CVE-2015-7346 Public exploit
SQL injection vulnerability in ZCMS 1.1.
-
Unscored —
markdown-it before 4.1.0 does not block data: URLs.
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for WordPress.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Vindula 1.9.
-
High 7.8
Ansible Sandbox Escape via Symlink Attack
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software.
-
Unscored —
dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).
-
Unscored —
-
High 7.5CVE-2015-5175 EPSS 11%
Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks
Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of service.
-
Unscored —
Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.
-
Unscored —
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow lo…
-
Unscored —
A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote…
-
Unscored —
A buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in Schneider Electric's SoM…
-
Unscored —
XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers t…
-
Unscored —
VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vm…
-
Unscored —
VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An a…
-
Unscored —CVE-2017-4905 Public exploit
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESX…
-
Unscored —
The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6…
-
Unscored —
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player…
-
Unscored —
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESX…
-
Unscored —
VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the S…
-
Unscored —
IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity I…
-
Unscored —
IBM WebSphere MQ 9.0.0.1 and 9.0.2 could allow a local user to write to a file or delete files in a directory they shou…
-
Unscored —
IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data u…
-
Unscored —
IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attack…
-
Unscored —
IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of …
-
Unscored —
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows …
-
Unscored —
IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote a…
-
Unscored —
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's session, caused by the f…
-
Unscored —
IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be re…
-
Unscored —
IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead …
-
Unscored —
IBM DOORS Next Generation (DNG/RRC) 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows us…
-
Unscored —
IBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting. This vulnerability allow…
-
Unscored —
IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and exp…
-
Unscored —
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, …
-
Unscored —
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using rev…
-
Unscored —CVE-2017-4914 Public exploit
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of t…
-
Unscored —
In ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows normal world attackers to c…
-
Unscored —
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_…
-
Unscored —
AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack.