Archive
25 August 2017
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Unscored —
In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.
-
Unscored —
In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, …
-
Unscored —
A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerabili…
-
Unscored —
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Ne…
-
Unscored —
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Da…
-
Unscored —
A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple G…
-
Unscored —
Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.…
-
Unscored —
A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. O…
-
Unscored —CVE-2017-9650 Public exploit
An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTR…
-
Unscored —CVE-2017-9644 Public exploit
An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteSca…
-
Unscored —CVE-2017-9640 Public exploit
A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5…
-
Unscored —
Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, befor…
-
Unscored —CVE-2015-1395 EPSS 11%
Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote att…
-
Unscored —CVE-2015-1325 Public exploit
Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in U…
-
Unscored —
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arb…
-
Unscored —
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arb…
-
High 7.5
Salt vulnerable to Improper Certificate Validation
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.
-
Medium 6.1
zend-diactoros Cross-site Scripting (XSS)
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.
-
Unscored —
php-fpm allows local users to write to or create arbitrary files via a symlink attack.
-
High 8.1
python-kerberos vulnerable to KDC spoofing attacks
The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.
-
Unscored —
mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary file…
-
Unscored —
mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files vi…
-
Unscored —CVE-2014-7859 EPSS 21%
Stack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before …
-
Unscored —
The web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not…
-
Unscored —CVE-2014-7857 EPSS 15%
D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 …
-
Unscored —CVE-2014-7858 EPSS 15%
The check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and lo…
-
Unscored —
CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before …
-
Unscored —
GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation f…
-
Unscored —
controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.
-
Unscored —
A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD…
-
Unscored —
A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, …
-
Unscored —
A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-3…
-
Unscored —
The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not …
-
Unscored —
The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flu…
-
Unscored —
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Faul…
-
Unscored —
The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the o…