Archive
June 2017
Vulnerabilities first published in this month (UTC), newest first.
1,033 results · Feed
-
Unscored —
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could poten…
-
Unscored —
In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could…
-
Unscored —
In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race C…
-
Unscored —
In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could p…
-
Unscored —
In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentiall…
-
Unscored —
In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could pot…
-
Unscored —
In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially …
-
Unscored —
In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability co…
-
Unscored —
In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepanc…
-
Unscored —
In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerab…
-
Unscored —
In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabil…
-
Unscored —
In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.
-
Unscored —
In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerabili…
-
Unscored —
In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabil…
-
Unscored —
In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability co…
-
Unscored —
In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could …
-
Unscored —
In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could po…
-
Unscored —
In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overfl…
-
Unscored —
In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerabil…
-
Unscored —
In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exis…
-
Unscored —
In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulner…
-
Unscored —
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-o…
-
Unscored —
CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for …
-
Unscored —
The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors inv…
-
High 7.5CVE-2017-5664 EPSS 17%
Improper Handling of Exceptional Conditions in Apache Tomcat
The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is prese…
-
Low 2.7
Multiple cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to i…
-
High 8.8
BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables obje…
-
Unscored —
BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script (modify user info…
-
Unscored —
Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attacke…
-
Unscored —
BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary code by uploading a crafted package c…
-
Unscored —
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to…
-
Unscored —
In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers …
-
Unscored —
libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption…
-
Unscored —
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_pro…
-
Unscored —
Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bu…
-
Unscored —
Starting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover page that could allow …
-
Unscored —CVE-2017-8836 Public exploit
CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2…
-
Unscored —CVE-2017-8838 Public exploit
XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380…
-
Unscored —
SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380h…
-
Unscored —CVE-2017-8837 Public exploit
Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw…