Archive
29 June 2017
Vulnerabilities first published on this day (UTC), newest first.
38 results · Feed
-
Unscored —
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote…
-
Unscored —
In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote…
-
Unscored —
In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp. A crafted…
-
Unscored —
In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The relat…
-
Unscored —
In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c. A crafted i…
-
Unscored —CVE-2017-10688 Public exploit
In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentic…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentic…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentic…
-
Unscored —CVE-2017-10682 Public exploit
SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitr…
-
Unscored —
Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink …
-
Unscored —
EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability…
-
High 8.8
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted…
-
High 8.8
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted…
-
High 8.8
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted…
-
High 8.8
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted…
-
High 8.8
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted…
-
High 8.8
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD C…
-
High 8.8
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted…
-
High 7.5
In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted…
-
Unscored —
On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored …
-
Unscored —
Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for no…
-
Unscored —
On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via …
-
Unscored —
On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CV…
-
Medium 5.7
TIBCO JasperReports Server cross-site vulnerabilities
Multiple JasperReports Server components contain vulnerabilities which may allow authorized users to perform cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The impact of this vulnerability includes the theoretical disclosure of sens…
-
Medium 4.1
TIBCO JasperReports Library Information Disclosure
JasperReports library components contain an information disclosure vulnerability. This vulnerability includes the theoretical disclosure of any accessible information from the host file system. Affects TIBCO JasperReports Library Community Edition (versions 6…
-
Unscored —
IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large as…
-
Unscored —
Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Mic…
-
Unscored —
The kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serv…
-
Unscored —
The graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated …
-
Unscored —
The kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to …
-
Unscored —
The DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated a…
-
Unscored —
admin/profile.php in GetSimple CMS 3.x has XSS in a name field.
-
Unscored —
Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by co…
-
Unscored —
Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to …
-
Unscored —
Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allo…
-
Unscored —
In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.