Archive
10 July 2017
Vulnerabilities first published on this day (UTC), newest first.
33 results · Feed
-
Unscored —
A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for …
-
Unscored —
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary c…
-
Unscored —
A vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local attacker to retrieve …
-
Unscored —
A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could…
-
Unscored —
A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated…
-
Unscored —
A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unau…
-
Unscored —
A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow a…
-
Unscored —
A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow a…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an a…
-
Unscored —
A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local atta…
-
Medium 6.6
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-relea…
-
Unscored —
During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sen…
-
Unscored —
It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 cou…
-
Unscored —CVE-2017-7175 Public exploit
NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt p…
-
High 7.5
Apache Traffic Control vulnerable to Slowloris-style Denial of Service attack
The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made on the configured DNS port will remain in the ESTABLISHED state until the client explicitly closes …
-
Unscored —
Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to i…
-
Unscored —
The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory …
-
Unscored —
IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive info…
-
Unscored —
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker…
-
Unscored —
IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-Fo…
-
Critical 9.8
Code execution in Apache Struts 1 plugin
The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
KEV Feb 10, 2022 -
Unscored —
In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be use…
-
Unscored —
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian pars…
-
Unscored —
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check t…
-
Unscored —
In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able…
-
Unscored —
In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial …
-
Unscored —
In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious arc…
-
Unscored —
The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of …
-
Unscored —
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.
-
Unscored —
The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory …
-
Unscored —
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.
-
Unscored —
The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of s…
-
Unscored —
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.