Skip to content
OpenAdvisories

Archive

26 June 2017

Vulnerabilities first published on this day (UTC), newest first.

29 results · Feed

  • Unscored —

    The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a …

  • Unscored —

    The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B…

  • Unscored —

    The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…

  • Unscored —

    There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input …

  • Unscored —

    The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is m…

  • Unscored —
    CVE-2017-6326 Public exploit EPSS 73%

    The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an …

  • Unscored —

    The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word fi…

  • Unscored —

    The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of servic…

  • Unscored —

    In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.

  • Unscored —

    The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in …

  • Unscored —

    The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted lengt…

  • Unscored —
    CVE-2015-3315 Public exploit

    Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impa…

  • Unscored —

    The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of f…

  • Unscored —

    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF im…

  • Unscored —

    fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking th…

  • Unscored —

    A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving…

  • Unscored —

    TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to…

  • Unscored —

    In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resultin…

  • Unscored —

    In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap ov…

  • Unscored —
    CVE-2017-9936 Public exploit

    In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in …

  • Unscored —

    ntopng before 3.0 allows HTTP Response Splitting.

  • Unscored —

    ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.

  • Unscored —

    A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Man…

  • Unscored —

    Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Forma…

  • Unscored —

    A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instanc…

  • Unscored —

    In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers t…

  • Unscored —

    In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers …

  • Unscored —

    Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all…

  • Unscored —

    The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use …