Archive
July 2017
Vulnerabilities first published in this month (UTC), newest first.
1,269 results · Feed
-
Unscored —
An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by …
-
Critical 9.8
Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does no…
KEV Nov 3, 2021 -
Unscored —
Cross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0.184 SP3 (9.1.0.184.3.12…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x befo…
-
Unscored —
NetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information, gain privileges, or cau…
-
Unscored —
NetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to obtain sensitive informa…
-
Unscored —
NetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive information, gain privileges, o…
-
Unscored —
NetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive credentials via vectors related …
-
Unscored —
The management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and earlier allows remote …
-
Unscored —
Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 does not use a constant-time compar…
-
Unscored —
Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4.4.2 allows remote attackers to obtain s…
-
Unscored —
The dashboard subscription interface in Request Tracker (RT) 4.x before 4.0.25, 4.2.x before 4.2.14, and 4.4.x before 4…
-
Unscored —
In ObjectPlanet Opinio before 7.6.4, there is XSS.
-
Unscored —
When GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in coders/dpx.c, a denial of …
-
Unscored —
When GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of service (OOM) in ReadMA…
-
Unscored —
When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders…
-
Unscored —
On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authenticati…
-
Unscored —
The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4…
-
Unscored —
AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in…
-
Unscored —
AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly fro…
-
Unscored —
Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's famil…
-
Unscored —
When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer ove…
-
Medium 6.1
Subrion Cross-site scripting (XSS) vulnerability
Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.
-
Unscored —
`serial` crate is unmaintained
The [`serial`](https://crates.io/crates/serial) crate is no longer maintained. Last release was on 2017-07-02. ## Possible alternatives Consider using an alternative, for instance the blocking librarys: - [serial2](https://crates.io/crates/serial2) - [serialp…
-
Unscored —
The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when readi…
-
Unscored —
There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For e…
-
Unscored —
There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a …
-
Unscored —
The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and a…
-
Unscored —
The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though thi…