Archive
11 August 2017
Vulnerabilities first published on this day (UTC), newest first.
100 results · Feed
-
Unscored —
Adobe Flash Player versions 26.0.0.137 and earlier have an exploitable type confusion vulnerability when parsing SWF fi…
-
Unscored —
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an…
-
Unscored —
Adobe Experience Manager 6.2 and earlier has a malicious file execution vulnerability.
-
Unscored —
Adobe Experience Manager 6.1 and earlier has a sensitive data exposure vulnerability.
-
Unscored —
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an…
-
Unscored —
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an…
-
Unscored —
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an…
-
Unscored —
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an…
-
Unscored —
Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information discl…
-
Unscored —
Adobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and earlier, and 11.0.20 an…
-
Unscored —
Userspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products with Android releases fro…
-
Unscored —
An array out-of-bounds access in all Qualcomm products with Android releases from CAF using the Linux kernel can potent…
-
Unscored —
A userspace process can cause a Denial of Service in the camera driver in all Qualcomm products with Android releases f…
-
Unscored —
Out of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with Android releases from CAF…
-
Unscored —
In the service locator in all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflo…
-
Unscored —
In all Qualcomm products with Android release from CAF using the Linux kernel, while processing fastboot boot command w…
-
High 7.5
Apache Tomcat vulnerable to SecurityManager bypass
A malicious web application running on Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 was able to bypass a configured SecurityManager via manipulation of the configuration parameters for the JSP Se…
-
Medium 4.3
Insufficient Verification of Data Authenticity in Apache Tomcat
The CORS Filter in Apache Tomcat 9.0.0.M1 to 9.0.0.M21, 8.5.0 to 8.5.15, 8.0.0.RC1 to 8.0.44 and 7.0.41 to 7.0.78 did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in…
-
High 7.5CVE-2017-7675 EPSS 10%
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.
-
Critical 9.8CVE-2017-8658 EPSS 20%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".