Archive
7 November 2017
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users…
-
Unscored —
The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to caus…
-
Unscored —
The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows loca…
-
Unscored —
The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local…
-
Unscored —
drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NUL…
-
Unscored —
The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local us…
-
Unscored —
drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of…
-
Unscored —
The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows loca…
-
Unscored —
/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL …
-
Unscored —
The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) …
-
Unscored —
A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC) versions prior to Version 3.4…
-
Unscored —
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian han…
-
Unscored —
lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rr…
-
High 7.4
An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1. A special…
-
Critical 9.0
An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet …
-
High 8.0
A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1. A specifi…
-
Medium 5.8
An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmwar…
-
Medium 6.5
An exploitable vulnerability exists in the WiFi management of Circle with Disney. A crafted Access Point with the same …
-
Critical 9.8
An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordina…
-
Critical 9.9
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0…
-
Critical 9.8CVE-2017-2894 EPSS 31%
An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose …
-
Critical 9.0
An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.…
-
High 8.1
An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.…
-
High 7.5
An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A…
-
Critical 9.6
An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted netwo…
-
Critical 9.0
An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. …
-
High 7.5
An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1…
-
Critical 9.9
An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Sp…
-
Critical 9.9
An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with D…
-
Critical 9.8
An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose …
-
Critical 9.9
An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted ne…
-
High 8.1
An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney. Spec…
-
High 7.5CVE-2017-2893 EPSS 25%
An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoo…
-
Critical 9.0
An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. S…
-
Critical 9.9
An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0…
-
High 8.1
An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific…
-
High 8.2
An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose …
-
Critical 9.6
An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. S…
-
High 7.4
An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. S…
-
Critical 9.8
An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.…