1 October 2017

10 results · Feed

• Unscored —
  CVE-2017-14976

  The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over-read vulnerabil…

  poppler poppler Debian Ubuntu
  Oct 1, 2017
• Unscored —
  CVE-2017-14974

  The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Bi…

  binutils Debian
  Oct 1, 2017
• Unscored —
  CVE-2017-14975

  The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerability…

  poppler poppler Debian Ubuntu
  Oct 1, 2017
• Unscored —
  CVE-2017-14977

  The FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer dereference vulnerabilit…

  poppler poppler Debian Ubuntu
  Oct 1, 2017
• Unscored —
  CVE-2017-14970

  In lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while parsing malformed OpenFlow …

  openvswitch openvswitch Debian Ubuntu
  Oct 1, 2017
• Unscored —
  CVE-2017-14957

  Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to …

  Oct 1, 2017
• Unscored —
  CVE-2017-14958

  lib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users, which allows remote PH…

  Oct 1, 2017
• Unscored —
  CVE-2017-14955 Public exploit EPSS 12%

  Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, wh…

  check-mk Ubuntu
  Oct 1, 2017
• Unscored —
  CVE-2017-14941

  Jaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which allows a remote authentica…

  jasperreports Ubuntu
  Oct 1, 2017
• Unscored —
  CVE-2017-14954 Public exploit

  The waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage data structures in uninte…

  Oct 1, 2017