Archive
June 2017
Vulnerabilities first published in this month (UTC), newest first.
131 results · Clear filters · Feed
-
Unscored —CVE-2017-8841 Public exploit
Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b3…
-
Unscored —CVE-2017-8839 Public exploit
XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_3…
-
Unscored —CVE-2017-8840 Public exploit
Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before …
-
Unscored —
Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) …
-
Unscored —CVE-2017-1000367 Public exploit
Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process…
-
Unscored —
Broadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified vectors, aka the "Broadpw…
-
Unscored —
OpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can result in arbitrary cod…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan/dissectors/packet-ipv6.c by val…
-
Unscored —
In Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This was addressed in epan/…
-
Unscored —
Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remo…
-
Unscored —
git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x b…