Skip to content
OpenAdvisories

Archive

5 August 2017

Vulnerabilities first published on this day (UTC), newest first.

23 results · Feed

  • Unscored —

    Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x bef…

  • Unscored —

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow…

  • Unscored —

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which al…

  • Unscored —

    In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which…

  • Unscored —

    In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allow…

  • Unscored —

    Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote …

  • Low 3.4

    An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypt…

  • Unscored —

    An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that ar…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authentic…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext …

  • Unscored —

    An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network p…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication w…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the r…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use au…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt…

  • Critical 9.8

    An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user a…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is …

  • Unscored —

    An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to th…

  • Unscored —

    An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visit…

  • Unscored —
    CVE-2017-7533 Public exploit

    Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges …

  • Unscored —

    If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'ad…

  • Unscored —

    SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTT…