Archive
25 July 2017
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
Unscored —
NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST AP…
-
Unscored —CVE-2017-9413 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attack…
-
Unscored —
MEDHOST Connex contains hard-coded credentials that are used for customer database access. An attacker with knowledge o…
-
Unscored —
Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary…
-
Unscored —
AppUse 4.0 allows shell command injection via a proxy field.
-
Unscored —
aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which allows local users to h…
-
Unscored —
The MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3, 1.24.x before 1.24.4…
-
Unscored —
Memory leak in AcquireVirtualMemory in ImageMagick before 7 allows remote attackers to cause a denial of service (memor…
-
Unscored —
Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest…
-
Unscored —
Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system f…
-
Unscored —CVE-2017-11499 Public exploit
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 …
-
Unscored —
The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel …
-
Unscored —
An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions after v1.6.0 and …
-
Unscored —
An issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release versions prior to v1.35.0 …