Archive
June 2017
Vulnerabilities first published in this month (UTC), newest first.
131 results · Clear filters · Feed
-
Unscored —
A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ve…
-
Unscored —CVE-2017-10688 Public exploit
In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. …
-
Unscored —CVE-2017-10682 Public exploit
SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitr…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Mic…
-
Unscored —CVE-2015-7898 Public exploit
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
-
Unscored —CVE-2015-7895 Public exploit
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
-
High 8.8CVE-2017-6086 Public exploit
ViMbAdmin CSRF Vulnerabilities
Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request …
-
Unscored —CVE-2017-2491 Public exploit
Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remo…
-
Unscored —CVE-2017-9830 Public exploit
Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, beca…
-
Critical 9.8
Code Injection in PHPUnit
Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…
KEV Feb 15, 2022 -
Unscored —CVE-2017-1297 Public exploit
IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-ba…
-
Unscored —
The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an …
-
Unscored —CVE-2015-3315 Public exploit
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impa…
-
Unscored —CVE-2017-9936 Public exploit
In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in …
-
Unscored —CVE-2017-9869 Public exploit
The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows re…
-
Unscored —CVE-2017-9872 Public exploit
The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products,…
-
Unscored —
/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read…
-
Unscored —
In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mo…
-
Unscored —CVE-2017-3629 Public exploit
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions …
-
Unscored —CVE-2017-3631 Public exploit
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versi…
-
Unscored —CVE-2017-3630 Public exploit
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions …
-
Unscored —CVE-2016-7508 Public exploit
Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL c…
-
Unscored —CVE-2017-7922 Public exploit
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strin…
-
Unscored —CVE-2017-7918 Public exploit
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuratio…
-
Unscored —CVE-2017-9129 Public exploit
The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to …
-
Unscored —CVE-2017-9130 Public exploit
The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cau…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Tex…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AV…
-
Unscored —
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when s…
-
Unscored —CVE-2017-1000370 Public exploit
The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed wi…
-
Unscored —CVE-2017-1000371 Public exploit
The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and …
-
Unscored —CVE-2017-1000379 Public exploit
The Linux Kernel running on AMD64 systems will sometimes map the contents of PIE executable, the heap or ld.so to where…
-
Unscored —
The OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a pathological input array of …
-
Unscored —CVE-2017-1000366 Public exploit
glibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate the heap/stack, causi…
-
Unscored —
NetBSD maps the run-time link-editor ld.so directly below the stack region, even if ASLR is enabled, this allows attack…
-
Unscored —CVE-2017-1000364 Public exploit
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not suffici…
-
Unscored —
IPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter, which is mishandled by …
-
Unscored —CVE-2017-9730 Public exploit
SQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2017-9742 Public exploit
The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of se…