6 August 2017

10 results · Feed

• Unscored —
  CVE-2017-10677

  Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demon…

  Aug 6, 2017
• Unscored —
  CVE-2017-12587

  ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.

  imagemagick imagemagick Debian Ubuntu
  Aug 6, 2017
• Unscored —
  CVE-2017-12588

  The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly a…

  rsyslog Debian
  Aug 6, 2017
• Unscored —
  CVE-2017-12480

  Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or pr…

  Aug 6, 2017
• Unscored —
  CVE-2017-12585

  SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters),…

  Aug 6, 2017
• Unscored —
  CVE-2017-12586

  SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to…

  Aug 6, 2017
• Unscored —
  CVE-2017-12583

  DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php.

  dokuwiki dokuwiki Debian Ubuntu
  Aug 6, 2017
• Unscored —
  CVE-2017-12584

  There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can …

  Aug 6, 2017
• High 8.1
  CVE-2017-12581

  Electron vulnerable to remote command execution

  GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy (SOP) is a preconditi…

  electron npm
  Aug 6, 2017
• Unscored —
  CVE-2017-12568

  Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allow…

  Aug 6, 2017