Archive

18 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /18 September 2017 →

All Critical High Medium Low Exploited only Public exploit

176 results · Feed

Unscored —

CVE-2017-12938

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a…

unrar-nonfree unrar-nonfree Debian Ubuntu

Aug 18, 2017
Unscored —

CVE-2017-12939

A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4…

Aug 18, 2017
Unscored —

CVE-2017-2289

Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an a…

KDDI Installer of Qua station connection tool for Windows Windows

Aug 18, 2017
Unscored —

CVE-2017-2228

Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via…

Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Teikihoukokusho Sakuseishien Tool

Aug 18, 2017
Unscored —

CVE-2017-10823

Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2…

Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10)

Aug 18, 2017
Unscored —

CVE-2017-10824

Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 2…

Teikoku Databank TDB CA TypeA use software

Aug 18, 2017
Unscored —

CVE-2017-10822

Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program re…

Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 September 30)

Aug 18, 2017
Unscored —

CVE-2017-10821

Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program releas…

Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30)

Aug 18, 2017
Unscored —

CVE-2017-10811

Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspec…

BUFFALO WCR-1166DS

Aug 18, 2017
Unscored —

CVE-2017-12935

The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid m…

graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine

Aug 18, 2017
Unscored —

CVE-2017-12937

The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.

graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine

Aug 18, 2017
Unscored —

CVE-2017-12936 EPSS 25%

The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with …

graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine

Aug 18, 2017
Unscored —

CVE-2017-12933

The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.…

php5 Ubuntu

Aug 18, 2017
Unscored —

CVE-2017-12934

ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free wh…

Aug 18, 2017
Unscored —

CVE-2017-12932

ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free …

php7.0 Ubuntu

Aug 18, 2017
Unscored —

CVE-2017-12927

A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php.

cacti Debian

Aug 18, 2017