Archive
July 2017
Vulnerabilities first published in this month (UTC), newest first.
1,269 results · Feed
-
Unscored —
In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle…
-
Unscored —
yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting perm…
-
Unscored —
In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload …
-
Unscored —
dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-ma…
-
Unscored —
Global buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, …
-
Unscored —
Stack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC5300, R…
-
Unscored —
Authenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated attacker to generate a PHP s…
-
Unscored —
Zoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors inv…
-
Unscored —
Due to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4.12.0 are vulnerable to…
-
Unscored —
There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0.26. A crafted input w…
-
Unscored —
There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in Exiv2 0.26. A Crafted in…
-
Unscored —
There is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of s…
-
Unscored —
There is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig=Contig image, which cause…
-
Unscored —
There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an exit call. A Crafted …
-
Unscored —
There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0.26. A crafted input wil…
-
Unscored —
There is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service…
-
Unscored —
There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in Exiv2 0.26. A Crafted i…
-
Unscored —
The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for…
-
Unscored —
Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to …
-
Unscored —
Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise L…
-
Unscored —
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root passw…
-
Unscored —
authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race conditi…
-
Unscored —
/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which …
-
Unscored —
The mod_dontdothat component of the mod_dav_svn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.1…
-
Unscored —
The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a de…
-
Unscored —CVE-2017-0152 EPSS 11%
A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling object…
-
Unscored —CVE-2017-0028 EPSS 19%
A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The…
-
Unscored —CVE-2017-0196 EPSS 18%
An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive infor…
-
Unscored —
Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication toke…
-
Unscored —
GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that …
-
Unscored —
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier a…
-
Unscored —
Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and ear…
-
Unscored —
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable…
-
Unscored —
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execut…
-
Unscored —
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable…
-
Unscored —
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier a…
-
Unscored —
Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read…
-
Unscored —
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain p…
-
Unscored —
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable…
-
Unscored —
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows …