Archive
July 2017
Vulnerabilities first published in this month (UTC), newest first.
1,269 results · Feed
-
Unscored —
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions …
-
Unscored —
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users…
-
Unscored —
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap ca…
-
Unscored —
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-21…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed …
-
Unscored —
Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hyp…
-
Unscored —
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to ob…
-
Unscored —
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to ca…
-
Unscored —
Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause…
-
Unscored —
Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel thr…
-
Unscored —
There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.
-
Unscored —CVE-2017-10803 Public exploit
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonym…
-
Unscored —
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on…
-
Unscored —
In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass…
-
Unscored —
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymou…
-
Unscored —
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup …
-
Unscored —
An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.
-
Unscored —
An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use cr…
-
Unscored —
Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary w…
-
Unscored —
A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unau…
-
Unscored —
A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database int…
-
Unscored —
A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a …
-
Unscored —
A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Netwo…
-
Unscored —
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Expres…
-
Unscored —
A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker…
-
Unscored —
A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) coul…
-
Unscored —
A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticate…
-
Unscored —
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary c…
-
Unscored —
A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, loca…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Netwo…
-
Unscored —
A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges …
-
Unscored —
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker…
-
Unscored —
A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthentica…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…
-
Unscored —
A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated,…
-
Unscored —
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker…
-
Unscored —
A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote att…
-
Unscored —
A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated…