Archive
14 June 2017
Vulnerabilities first published on this day (UTC), newest first.
37 results · Feed
-
Unscored —
A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior. An…
-
Unscored —
A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42…
-
Unscored —
EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability.
-
Unscored —
EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to co…
-
Unscored —
Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject…
-
High 8.8
Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project…
-
Unscored —
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box f…
-
Unscored —
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one…
-
Unscored —
The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerabi…
-
Unscored —
An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redir…
-
Medium 5.9
Apache Ranger policy engine incorrectly matches paths in certain conditions
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.
-
Medium 4.8
Apache Ranger admin users can store some arbitrary javascript code to be executed when normal users login and access policies
Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.
-
Medium 5.9
Moderate severity vulnerability that affects org.apache.ranger:ranger
In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table.
-
Critical 9.8
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.
-
Unscored —
An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside …
-
Unscored —
An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application …
-
Unscored —
A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file…
-
Unscored —
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cau…
-
Unscored —
A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to…
-
Unscored —
A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arb…
-
Unscored —
An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application…
-
Unscored —
An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to exec…
-
Unscored —
An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execut…
-
Unscored —
A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted f…
-
Unscored —
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cau…
-
Unscored —
A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cau…
-
Unscored —
A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted …
-
Unscored —
An information disclosure vulnerability in libziparchive could enable a local malicious application to access data outs…
-
Unscored —
An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to acces…
-
Unscored —
An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access dat…
-
Unscored —
An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access dat…
-
High 7.5
Loaded Databook of Tablib prone to python insertion resulting in command execution
An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4. A yaml loaded Databook can execute arbitrary python commands resulting in command execution. An attacker can insert python into loaded yaml to trigger this vulnerabili…
-
Unscored —
In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an applic…
-
Unscored —
Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.6…