Archive
August 2017
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCo…
-
Unscored —
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/…
-
Unscored —
DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An a…
-
Unscored —
Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers …
-
Unscored —
In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user…
-
Unscored —CVE-2017-12984 Public exploit
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.
-
Unscored —
lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.
-
Critical 9.8CVE-2017-11366 Public exploit
Codiad Vulnerable to Shell Command Injection
components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.
-
Unscored —
The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection …
-
Unscored —
git-annex command injection via malicious SSH hostname
git-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, as demonstrated by an ssh://-eProxyCommand= URL, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-100011…
-
High 7.5
Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT
Nimbus JOSE+JWT before 4.36 proceeds with ECKey construction without ensuring that the public x and y coordinates are on the specified curve, which allows attackers to conduct an Invalid Curve Attack in environments where the JCE provider lacks the applicable…
-
High 7.5
Nimbus JOSE+JWT missing overflow check
In Nimbus JOSE+JWT before 4.39, there is no integer-overflow check when converting length values from bytes to bits, which allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext so that different plainte…
-
Unscored —
The asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28 allows remote attackers to …
-
Low 3.1
Nimbus JOSE+JWT vulnerable to padding oracle attack
Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.
-
Unscored —
Race condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a deni…
-
Unscored —
The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment …
-
Unscored —
The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and se…
-
Unscored —
Stack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a c…
-
Unscored —
The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutil…
-
Unscored —
There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP b…
-
Unscored —
There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that wi…
-
Unscored —
There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open pare…
-
Unscored —
There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial o…
-
Unscored —
There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GN…
-
Unscored —
There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. The vulnerability causes an out-of-bounds write in …
-
Unscored —
There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in …
-
Unscored —
There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in G…
-
Unscored —
There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU …
-
Unscored —
There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cp…
-
Unscored —
An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust materia…
-
Medium 5.3
Improper Privilege Management in X-Pack
The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reportin…
-
Unscored —
Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.
-
Unscored —
A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_d…
-
Unscored —
Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows lo…
-
Unscored —
A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions ea…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption ca…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can l…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can le…
-
Unscored —
In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-termi…