Archive
August 2017
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\pwp.c.
-
Unscored —
The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly a…
-
Unscored —
Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or pr…
-
Unscored —
SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters),…
-
Unscored —
SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to…
-
Unscored —CVE-2017-12583 Scanner template
DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE_AT variable) to doku.php.
-
Unscored —
There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. Also, an entire user profile (including the password) can …
-
High 8.1
Electron vulnerable to remote command execution
GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. This also affects all applications that bundle Electron code equivalent to 1.6.8 or earlier. Bypassing the Same Origin Policy (SOP) is a preconditi…
-
Unscored —
Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allow…
-
Unscored —
Persistent Cross Site Scripting (XSS) exists in Splunk Enterprise 6.5.x before 6.5.2, 6.4.x before 6.4.6, and 6.3.x bef…
-
Unscored —
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allow…
-
Unscored —
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which al…
-
Unscored —
In ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage in coders/psd.c, which…
-
Unscored —
In ImageMagick 7.0.6-2, a memory leak vulnerability was found in the function ReadMVGImage in coders/mvg.c, which allow…
-
Unscored —
Heap-based Buffer Overflow in the psf_binheader_writef function in common.c in libsndfile through 1.0.28 allows remote …
-
Low 3.4
An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypt…
-
Unscored —
An Incorrect Password Management issue was discovered in SMA Solar Technology products. Default passwords exist that ar…
-
Unscored —
An issue was discovered in SMA Solar Technology products. An attacker can change the plant time even when not authentic…
-
Unscored —
An issue was discovered in SMA Solar Technology products. By sniffing for specific packets on the localhost, plaintext …
-
Unscored —
An issue was discovered in SMA Solar Technology products. An attacker can use Sunny Explorer or the SMAdata2+ network p…
-
Unscored —
An issue was discovered in SMA Solar Technology products. The SIP implementation does not properly use authentication w…
-
Unscored —
An issue was discovered in SMA Solar Technology products. By sending crafted packets to an inverter and observing the r…
-
Unscored —
An issue was discovered in SMA Solar Technology products. The SMAdata2+ communication protocol does not properly use au…
-
Unscored —
An issue was discovered in SMA Solar Technology products. The inverters make use of a weak hashing algorithm to encrypt…
-
Critical 9.8
An issue was discovered in SMA Solar Technology products. A secondary authentication system is available for Installers…
-
Unscored —
An issue was discovered in SMA Solar Technology products. All inverters have a very weak password policy for the user a…
-
Unscored —
An issue was discovered in SMA Solar Technology products. When signed into Sunny Explorer with a wrong password, it is …
-
Unscored —
An issue was discovered in SMA Solar Technology products. By sending nonsense data or setting up a TELNET session to th…
-
Unscored —
An issue was discovered in SMA Solar Technology products. If a user simultaneously has Sunny Explorer running and visit…
-
Unscored —CVE-2017-7533 Public exploit
Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges …
-
Unscored —
If, after successful installation of MantisBT through 2.5.2 on MySQL/MariaDB, the administrator does not remove the 'ad…
-
Unscored —
SocuSoft Flash Slideshow Maker Professional through v5.20, when the advanced configuration is used, has an xml_path HTT…
-
Unscored —
The find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based…
-
Unscored —
The ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of s…
-
Unscored —
IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed a…
-
Unscored —
Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privile…
-
Unscored —
Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain pr…
-
Unscored —
MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay S…
-
Unscored —
MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only …
-
Unscored —
MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to al…