Skip to content
OpenAdvisories

Archive

29 July 2017

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows remote authenticated …

  • Unscored —

    interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which ar…

  • Unscored —

    A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/d…

  • Unscored —

    Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remo…

  • Unscored —

    A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/d…

  • Unscored —

    The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redir…

  • Unscored —

    A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which …

  • Unscored —

    A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decom…

  • Unscored —

    A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decom…

  • Unscored —

    The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks invol…

  • Unscored —

    An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util…

  • Unscored —

    A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in …