Archive
28 August 2017
Vulnerabilities first published on this day (UTC), newest first.
104 results · Feed
-
Unscored —
kgb-bot 1.33-2 allows remote attackers to cause a denial of service (crash).
-
Unscored —
Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier.
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inj…
-
Unscored —
Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.
-
Unscored —
NULL Pointer Dereference in the id3v2AddAudioDuration function in libmp3lame/id3tag.c in LAME 3.99.5 allows attackers t…
-
Unscored —
Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation (DSM) before …
-
Unscored —CVE-2017-12954 Public exploit
The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of…
-
Unscored —
Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of serv…
-
Unscored —
OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL p…
-
Unscored —
Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attack…
-
Unscored —
PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of…
-
Unscored —CVE-2017-12952 Public exploit
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer …
-
Unscored —
A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally…
-
Unscored —
CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-…
-
Unscored —CVE-2017-12950 Public exploit
The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL …
-
Unscored —
Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2017-12953 Public exploit
The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial…
-
Unscored —
wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafte…
-
Unscored —CVE-2017-12951 Public exploit
The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a de…
-
Unscored —
CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointe…
-
Unscored —
Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) befo…
-
Unscored —
Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cau…
-
Unscored —
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mec…
-
Unscored —CVE-2017-3735 EPSS 21%
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…
-
Unscored —CVE-2017-9979 Public exploit
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be …
-
Unscored —CVE-2017-9978 Public exploit
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1,…
-
Unscored —
Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.
-
Unscored —
libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
-
Unscored —
wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in…
-
Unscored —
Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying t…
-
Unscored —
Directory traversal vulnerability in ppmd 10.1-5.
-
Unscored —
-
Unscored —
-
Unscored —
-
Unscored —
The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.
-
Unscored —
Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.
-
Unscored —
Directory traversal vulnerability in ES File Explorer 3.2.4.1.
-
Unscored —
HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.