Archive
22 August 2017
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
Unscored —
IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications wh…
-
Unscored —
WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.
-
Unscored —
WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.
-
High 8.8
springframework-social Cross-Site Request Forgery vulnerability
Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.
-
Unscored —
Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.
-
Unscored —
oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV befor…
-
Unscored —
Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.
-
Unscored —
HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.
-
Unscored —
Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service…
-
Unscored —
The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on Nov…
-
Unscored —
Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW4…
-
Unscored —
A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through …
-
Unscored —
Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI comma…
-
Unscored —
Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metac…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with fir…
-
Unscored —
dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.
-
Unscored —
Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) …
-
Unscored —
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which a…
-
Unscored —
GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.
-
Unscored —
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314…
-
Unscored —
In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow…
-
Unscored —
GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311…
-
Unscored —
In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd…
-
Unscored —
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allo…
-
Unscored —
In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows…
-
Unscored —
GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c.