Archive
September 2017
Vulnerabilities first published in this month (UTC), newest first.
51 results · Clear filters · Feed
-
High 7.5
LDAP Injection in ldapauth
ldapauth-fork before 2.3.3 allows remote attackers to perform LDAP injection attacks via a crafted username.
-
High 8.8
An exploitable use-after-free exists in the PDF parsing functionality of Lexmark Perspective Document Filters 11.3.0.24…
-
High 7.5
An exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality of LabVIEW 2017, LabVIE…
-
High 7.5
An exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger-CLI 3.1.1. A specially c…
-
High 7.5
An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document …
-
High 8.8
An exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk-Pixbuf 2.36.6 when co…
-
High 8.8
An exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment functionality of Gdk-Pix…
-
High 7.5
An exploitable use-after-free vulnerability exists in the account parsing component of the Ledger-CLI 3.1.1. A speciall…
-
High 7.5
Scrapy denial of service vulnerability
Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow…
-
High 7.5
SimpleSAMLphp InfoCard module Incorrect signature verification
The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.
-
High 7.5
SimpleSAMLphp Authentication context bypass in the multiauth module
The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/authsources.php via vectors related to improper validation of user input.