Archive
7 July 2017
Vulnerabilities first published on this day (UTC), newest first.
74 results · Feed
-
Unscored —
Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token with…
-
Unscored —
Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch _nodes API leaking…
-
High 7.5
Apache Solr insecure inter-node communication
Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in…
-
Unscored —
When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mon…
-
Unscored —
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Reloca…
-
Unscored —
The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of serv…
-
Unscored —
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Delete…
-
Unscored —
When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() fu…
-
Unscored —
When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSp…
-
Unscored —
When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() func…
-
Unscored —
Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb…
-
Unscored —
Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.…
-
Unscored —
systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the servi…
-
Unscored —
The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read m…
-
Unscored —
An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauth…
-
Unscored —
A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426…
-
Unscored —CVE-2017-9627 Public exploit
An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2…
-
Unscored —
A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.23…
-
Unscored —
Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows remote attackers to re…
-
Unscored —
Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attack…
-
Unscored —
The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (…
-
Unscored —
An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra D…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer w…
-
Unscored —
The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_refe…
-
Unscored —
An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the G…
-
Unscored —
An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to der…
-
Unscored —
HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.
-
Unscored —
Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI.
-
Unscored —
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web scri…
-
Unscored —
Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect u…
-
Unscored —
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW…
-
Unscored —
Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web…
-
Unscored —
Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations …
-
Unscored —
Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbi…
-
Unscored —
Untrusted search path vulnerability in Installer of "Setup file of advance preparation" (jizen_setup.exe) (The version …
-
Unscored —
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hi…
-
Unscored —
Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till …
-
Unscored —
Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbit…
-
Unscored —
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW…