Archive
12 September 2017
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
In the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin before .52.5 for WordPre…
-
Unscored —
In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for…
-
Unscored —
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated whe…
-
Unscored —
IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly…
-
Unscored —
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to…
-
Unscored —
IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount furt…
-
Unscored —
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user wi…
-
Unscored —
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user wi…
-
Unscored —
IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2…
-
Unscored —
IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user wi…
-
Unscored —
IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that coul…
-
Unscored —
AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.
-
Unscored —
In ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel cache nexus, which al…
-
Unscored —
In BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via the extension paramete…
-
Unscored —CVE-2017-14396 Public exploit
In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of …
-
Unscored —
EMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could potentially be exploited by m…
-
Unscored —
LibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via a crafted file.
-
Unscored —
NexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.
-
Unscored —CVE-2017-8918 Public exploit
XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely…
-
Unscored —
SQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.
-
Unscored —
upload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code execution by using the imag…
-
Unscored —CVE-2017-14344 Public exploit
This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker mus…
-
Unscored —CVE-2017-1000250 Public exploit
All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability whic…
-
Unscored —
The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and inclu…
-
Unscored —
ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafte…
-
Unscored —
ImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted xcf image file.
-
Unscored —
ImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a crafted wpg image file.
-
Unscored —
When MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in conjunction with a non-MISP e…
-
Unscored —
A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV spe…
-
Unscored —
An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush gr…
-
Unscored —
A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting dow…
-
Unscored —
In Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio Protocol), a large au…
-
Unscored —
A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to s…
-
Medium 5.3
Jenkins HttpOnly flag not Set for session cookies
Jenkins before 1.586 does not set the HttpOnly flag in a Set-Cookie header for session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to obtain potentially sensitive information via script access to cookies.
-
Medium 5.3
Jenkins secure flag not set on session cookies
Jenkins before 1.586 does not set the secure flag on session cookies when run on Tomcat 7.0.41 or later, which makes it easier for remote attackers to capture cookies by intercepting their transmission within an HTTP session.
-
Unscored —
CAPTCHA bypass vulnerability in MantisBT before 1.2.19.
-
Unscored —
In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available vi…
-
Unscored —
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function PersistPixelCache in magick/cache.c, …
-
Unscored —
In ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in coders/mpc.c, which a…
-
Unscored —
The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (…