Archive
August 2017
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attack…
-
Unscored —
PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of…
-
Unscored —CVE-2017-12952 Public exploit
The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer …
-
Unscored —
A kernel driver, namely DLMFENC.sys, bundled with the DESLock+ client application 4.8.16 and earlier contains a locally…
-
Unscored —
CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-…
-
Unscored —CVE-2017-12950 Public exploit
The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL …
-
Unscored —
Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2017-12953 Public exploit
The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial…
-
Unscored —
wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafte…
-
Unscored —CVE-2017-12951 Public exploit
The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a de…
-
Unscored —
CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointe…
-
Unscored —
Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) befo…
-
Unscored —
Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cau…
-
Unscored —
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mec…
-
Unscored —CVE-2017-3735 EPSS 21%
While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This woul…
-
Unscored —CVE-2017-9979 Public exploit
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be …
-
Unscored —CVE-2017-9978 Public exploit
On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1,…
-
Unscored —
Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.
-
Unscored —
libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
-
Unscored —
wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in…
-
Unscored —
Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying t…
-
Unscored —
Directory traversal vulnerability in ppmd 10.1-5.
-
Unscored —
-
Unscored —
-
Unscored —
-
Unscored —
The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.
-
Unscored —
Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3.
-
Unscored —
Directory traversal vulnerability in ES File Explorer 3.2.4.1.
-
Unscored —
HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.
-
Medium 6.8
GE Multilink Cross-site Scripting
Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.
-
Unscored —
Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20.
-
Unscored —
The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.
-
Unscored —
Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.
-
Unscored —
Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.
-
Unscored —
Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and …