Archive
5 October 2017
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utili…
-
Unscored —
A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails…
-
Unscored —
A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper …
-
Unscored —
An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The applicatio…
-
Unscored —
A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet t…
-
Unscored —
Cleartext transmission of credentials in net/smtp
An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires that, during SMTP, the PLAIN auth scheme must only be used on network connections secured with TLS. The original implementation of smtp.PlainAuth in Go 1.0 enfor…
-
Unscored —
Remote command execution via "go get" in cmd/go
Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom domains, it is possible to arrange things so that example.com/pkg1 points to a Subversion repository but example.com/pkg1/pkg2 points to a Git repository. If the Sub…
-
High 8.8
A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. A speciall…
-
High 8.8
An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. A special…
-
High 8.8
An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. A special…
-
Unscored —
The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a br…
-
Unscored —
IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows u…
-
Unscored —
IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-a…
-
Unscored —
IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by …
-
Unscored —
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vC…
-
Unscored —
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A data…
-
Unscored —
A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22,…
-
Unscored —
A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30…
-
Unscored —CVE-2017-14083 Public exploit
A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to …
-
Unscored —CVE-2017-14086 Public exploit
Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated …
-
Unscored —CVE-2017-14085 Public exploit
Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can ac…
-
Unscored —
A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to …
-
Unscored —CVE-2017-14087 Public exploit
A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular H…
-
Unscored —
Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to …
-
Unscored —CVE-2017-14089 Public exploit
An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated …
-
Unscored —
A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote atta…
-
Unscored —
A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Router…
-
Unscored —
A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthentica…
-
Unscored —
A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) S…
-
Unscored —CVE-2017-12263 EPSS 11%
A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker …
-
Unscored —
A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, loca…
-
Unscored —
A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to c…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow a…
-
Unscored —
A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unau…
-
Unscored —
A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application…
-
Unscored —
A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authentic…
-
Unscored —
A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perfor…
-
Unscored —
A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an …
-
Unscored —
A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to …
-
Unscored —
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.