Archive
2 August 2017
Vulnerabilities first published on this day (UTC), newest first.
68 results · Feed
-
Unscored —CVE-2017-11385 EPSS 38%
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x6b1b due to lack …
-
Unscored —CVE-2017-11389 EPSS 27%
Directory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution by attackers able to …
-
Unscored —CVE-2017-11387 EPSS 15%
Authentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when authentication validation i…
-
Unscored —
XML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if exploited, could lead to info…
-
Unscored —CVE-2017-11388 EPSS 14%
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when RestfulServiceUtility.NET.dll doesn'…
-
Unscored —CVE-2017-11384 EPSS 38%
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x3b21 due to lack …
-
Unscored —CVE-2017-11386 EPSS 24%
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x4707 due to lack …
-
Unscored —CVE-2017-11383 EPSS 38%
SQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing opcode 0x1b07 due to lack …
-
Unscored —
XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 an…
-
Unscored —
The hp-plugin utility in HP Linux Imaging and Printing (HPLIP) makes it easier for man-in-the-middle attackers to execu…
-
Unscored —CVE-2015-7891 Public exploit
Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with …
-
Unscored —
Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote a…
-
Unscored —
The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gatew…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in views/add-license-form.php in the Digium Addons module (digiumad…
-
Unscored —CVE-2015-2560 EPSS 15%
Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Admini…
-
Unscored —
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and co…
-
Unscored —
Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a …
-
Unscored —
Cisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote authenticated users to…
-
Unscored —
IBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5 before 6.0.5.6 allows rem…
-
Unscored —
The GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP…
-
Unscored —CVE-2017-7642 Public exploit
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local us…
-
Unscored —CVE-2017-11355 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inje…
-
Unscored —CVE-2017-11356 Public exploit
The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated user…
-
Unscored —
The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users…
-
Unscored —
GitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an authenticated user with the abi…
-
Unscored —
GitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an authenticated user with …
-
Unscored —
The DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11, and 8.x before 8.0.3 …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.…
-
Unscored —
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause an out of bounds read o…
-
Unscored —
Multiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver Package (MBDP) with b…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management web interface in Palo Alto Networks PAN-OS before 6.1.18, 7.…
-
Unscored —
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOp…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Trello app before 4.0.8 for iOS might allow remote attackers to inject …
-
Unscored —
qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to cause a denial of servi…
-
Unscored —
Stack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a de…
-
Unscored —
IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid…
-
Unscored —
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could c…
-
Unscored —
IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an …
-
Unscored —
A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escal…
-
Unscored —
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing a…