Archive
27 June 2017
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Unscored —CVE-2015-7898 Public exploit
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
-
Unscored —CVE-2015-7895 Public exploit
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
-
High 8.8CVE-2017-6086 Public exploit
ViMbAdmin CSRF Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request …
-
Unscored —CVE-2017-2491 Public exploit
Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remo…
-
Unscored —CVE-2017-9830 Public exploit
Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, beca…
-
Critical 9.8
Code Injection in PHPUnit
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…
KEV Feb 15, 2022 -
Unscored —CVE-2017-1297 Public exploit
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-ba…