Archive
20 September 2017
Vulnerabilities first published on this day (UTC), newest first.
51 results · Feed
-
High 8.8
IPython vulnerable to cross site request forgery (CSRF)
Cross-site request forgery in the REST API in IPython 2 and 3.
-
Unscored —
An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-…
-
Unscored —
An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmi…
-
Unscored —
The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secur…
-
Unscored —
A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Tra…
-
Unscored —
The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is …
-
Unscored —
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials…
-
Unscored —
There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesy…
-
Unscored —
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials…
-
Unscored —
The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM gue…
-
Unscored —
GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrat…