Archive
July 2017
Vulnerabilities first published in this month (UTC), newest first.
1,269 results · Feed
-
Unscored —
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was addressed in epan/dissectors/…
-
Unscored —
In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by p…
-
Unscored —
In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory. Thi…
-
Unscored —
In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed in epan/dissectors/pa…
-
Unscored —
The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allo…
-
Unscored —
An issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the ExecutablePath field and it then…
-
Unscored —
gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "…
-
Unscored —
Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An authenticated user with pe…
-
Unscored —
Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field. An authenticated…
-
Unscored —
spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages fro…
-
Unscored —
A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2…
-
Unscored —
REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components.
-
Unscored —
REDCap before 7.5.1 has XSS via the query string.
-
Unscored —
IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the …
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id'].
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'], $_POST['name'], $_POS…
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_P…
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].
-
Unscored —
Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firm…
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id'].
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id'].
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'],…
-
Unscored —
Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
-
Unscored —CVE-2017-11403 EPSS 28%
The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a u…
-
Unscored —
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager ac…
-
Unscored —
In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action t…
-
Unscored —
NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive passw…
-
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8CVE-2017-6744 Exploited
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
KEV Mar 3, 2022 -
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
KEV Mar 3, 2022 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
KEV Apr 19, 2023 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
-
Unscored —
ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS …
-
Unscored —CVE-2017-9813 Public exploit
In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptN…
-
Unscored —CVE-2017-9810 Public exploit
There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Ma…
-
Unscored —
An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before…