Archive
29 August 2017
Vulnerabilities first published on this day (UTC), newest first.
98 results · Feed
-
Unscored —
IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these me…
-
Unscored —
IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of t…
-
Unscored —
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X…
-
Unscored —
IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower an…
-
Unscored —
The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used cau…
-
Unscored —CVE-2017-12865 Public exploit
Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers to cause a denial of se…
-
Unscored —
ZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non-unique X.509 certific…
-
Unscored —
Multiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for WordPress allow remote…
-
Unscored —
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators …
-
Unscored —
Cross-site scripting (XSS) vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level adm…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x befor…
-
Unscored —
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators …
-
Unscored —
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators …
-
Unscored —
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level adm…
-
Unscored —
SQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before V100R002C00SPC201 allow…
-
Unscored —CVE-2015-8299 Public exploit
Buffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows remote attackers to execute…
-
High 7.5
Special top object can be used to access Struts' internals
Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.
-
Unscored —
diag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy Secure 5.3R1 through 5.3R5,…
-
Unscored —
The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU con…
-
Unscored —
Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms all…
-
Unscored —
Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —
qa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create multiple user accounts.
-
Unscored —CVE-2017-12763 Public exploit
An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privi…
-
Unscored —
NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote aut…
-
Medium 5.9
SimpleSAMLphp Invalid token creation and validation
The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.
-
Unscored —CVE-2017-10952 Public exploit
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.…
-
Unscored —
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Bitdefender Total Se…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.…
-
Unscored —
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile() in compileTranslation…
-
Unscored —
There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will…
-
Unscored —
There is an illegal address access in the function postprocess_termcap() in parse_entry.c in ncurses 6.0 that will lead…
-
Unscored —
There is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c in Liblouis 3.2.0 that…
-
Unscored —
There is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars() in compileTranslationT…
-
Unscored —
There is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remo…
-
Unscored —
There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to …
-
Unscored —
There are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1.3.26 that will lead to…
-
Unscored —
There is an illegal address access in the function _lou_getALine() in compileTranslationTable.c:343 in Liblouis 3.2.0.
-
Unscored —
There is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds write in Liblouis 3.2.0,…