Archive
June 2017
Vulnerabilities first published in this month (UTC), newest first.
1,033 results · Feed
-
Unscored —
TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to…
-
Unscored —
In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can lead to an abort resultin…
-
Unscored —
In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c. This heap ov…
-
Unscored —CVE-2017-9936 Public exploit
In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a memory leak resulting in …
-
Unscored —
-
Unscored —
ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.
-
Unscored —
A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Man…
-
Unscored —
Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Forma…
-
Unscored —
A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instanc…
-
Unscored —
In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers t…
-
Unscored —
In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers …
-
Unscored —
Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all…
-
Unscored —
The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use …
-
Unscored —
The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of ser…
-
Unscored —
The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of…
-
Unscored —
The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3,…
-
Unscored —CVE-2017-9869 Public exploit
The II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows re…
-
Unscored —
The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows r…
-
Unscored —CVE-2017-9872 Public exploit
The III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products,…
-
Unscored —
The III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and other products, allows r…
-
Unscored —
In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obt…
-
Unscored —
The function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers to cause a denial of se…
-
High 8.8
Dolibarr ERP and CRM Unsafe File Upload Vulnerability
Dolibarr ERP/CRM 5.0.3 and prior allows low-privilege users to upload files of dangerous types, which can result in arbitrary code execution within the context of the vulnerable application.
-
Unscored —
The bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial of service (heap-base…
-
Unscored —
Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.ph…
-
Unscored —
SQL injection vulnerability in C_InfoService.asmx in WebServices in Easysite 7.0 could allow remote attackers to execut…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary…
-
Unscored —
/cgi-bin/wapopen in Boa 0.94.14rc21 allows the injection of "../.." using the FILECAMERA variable (sent by GET) to read…
-
Unscored —
An integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c file of libmtp (version…
-
Unscored —
An integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function) of libmtp (version 1.1.12 and below) allows a…
-
Unscored —CVE-2017-9829 EPSS 69%
'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allo…
-
Unscored —CVE-2017-9828 EPSS 82%
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell comman…
-
Unscored —
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with rai…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another use…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET req…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by u…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper ac…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially…