Archive
July 2017
Vulnerabilities first published in this month (UTC), newest first.
83 results · Clear filters · Feed
-
Unscored —CVE-2017-11330 Public exploit
The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a deni…
-
Unscored —CVE-2017-11548 Public exploit
The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2017-11359 Public exploit
The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (…
-
Unscored —CVE-2017-11333 Public exploit
The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial…
-
Unscored —CVE-2017-11332 Public exploit
The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (di…
-
Unscored —CVE-2017-11331 Public exploit
The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of ser…
-
Unscored —CVE-2017-9476 Public exploit
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (fir…
-
Unscored —CVE-2017-11358 Public exploit
The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service…
-
Unscored —
In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured …
-
Unscored —
Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.
-
Unscored —
Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file.
-
Unscored —CVE-2017-9259 Public exploit
The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote att…
-
Unscored —CVE-2017-9260 Public exploit
The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attac…
-
Unscored —CVE-2017-9258 Public exploit
The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers t…
-
Unscored —CVE-2017-9614 Public exploit
The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2017-9412 Public exploit
The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2015-2798 Public exploit
SQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2015-5594 Public exploit
The sanitize_string function in ZenPhoto before 1.4.9 utilized the html_entity_decode function after input sanitation, …
-
Unscored —
ZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote attackers to obtain root acces…
-
Unscored —CVE-2017-9413 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attack…
-
Unscored —CVE-2017-11499 Public exploit
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 …
-
Unscored —
An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 all…
-
Unscored —
cgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025 with firmware 1.81 allow…
-
Unscored —
snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_2012070…
-
Unscored —CVE-2017-11519 Public exploit
passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging…
-
Unscored —
Stack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote a…
-
Unscored —CVE-2015-5195 Public exploit
ntp_openssl.m4 in ntpd in NTP before 4.2.7p112 allows remote attackers to cause a denial of service (segmentation fault…
-
Unscored —CVE-2017-9415 Public exploit
Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target …
-
Medium 6.1CVE-2017-11503 Public exploit
Cross-site scripting in PHPMailer
PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.
-
Unscored —CVE-2017-11502 Public exploit
Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /.…
-
Unscored —CVE-2017-7039 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…
-
Unscored —CVE-2017-7048 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…
-
Unscored —CVE-2017-7038 Public exploit
A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is …
-
Unscored —CVE-2017-7056 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…
-
Unscored —CVE-2017-7037 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…
-
Unscored —CVE-2017-7049 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…
-
Unscored —CVE-2017-7043 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…
-
Unscored —CVE-2017-7047 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvO…
-
Unscored —CVE-2017-7064 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…
-
Unscored —CVE-2017-7040 Public exploit
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCl…