Archive
17 October 2017
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —
A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-bas…
-
Unscored —
In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via…
-
Unscored —
An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web applic…
-
Unscored —
A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application…
-
Unscored —
A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web inter…
-
Unscored —
An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a…
-
Unscored —
An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user'…
-
Unscored —
An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticate…
-
Unscored —
SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php.
-
Unscored —
NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a m…
-
Unscored —
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This…
-
Unscored —
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to …
-
Unscored —
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verifica…
-
Unscored —
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external …
-
Unscored —
Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authent…
-
High 8.0
Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Inte…
-
Unscored —
Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct dir…
-
Unscored —
The x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feat…
-
Unscored —
Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7…
-
Unscored —CVE-2014-8357 Public exploit
backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a…
-
Unscored —
The web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to execute arbitrary com…
-
Unscored —
The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive informat…
-
Unscored —
Unrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in protected/controllers/Prof…
-
Unscored —
network.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) vi…
-
Unscored —
buddy-ng.c in Aircrack-ng before 1.2 Beta 3 allows remote attackers to cause a denial of service (segmentation fault) v…
-
Unscored —
nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified…
-
High 8.8
gollum and gollum-lib allow remote authenticated users to execute arbitrary code
The gollum-grit_adapter Ruby gem dependency in gollum before 3.1.1 and the gollum-lib gem dependency in gollum-lib before 4.0.1 when the string "master" is in any of the wiki documents, allows remote authenticated users to execute arbitrary code via the -O or…
-
Unscored —
Cross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to in…
-
Unscored —
The getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote attackers to read arbitrary fi…
-
Unscored —
FlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing attacks via the Swfil…
-
Unscored —
Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handsh…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (I…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (P…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handsha…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) d…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when p…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) dur…
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …
-
Unscored —
Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal …