17 November 2017

100 results · Feed

• Unscored —
  CVE-2017-1000196

  October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromi…

  Nov 17, 2017
• Critical 9.8
  CVE-2017-1000194

  October CMS File Upload Vulnerability

  October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applications on the server.

  october/october Packagist
  Nov 17, 2017
• Medium 6.1
  CVE-2017-1000193

  October CMS XSS

  October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser.

  october/october Packagist
  Nov 17, 2017
• High 8.8
  CVE-2017-1000208

  Deserialization of Untrusted Data in swagger-parser

  A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Open-API specification is parsed. This in particular, affects the 'generate' and 'validate' command in …

  io.swagger:swagger-codegen io.swagger:swagger-parser Maven
  Nov 17, 2017
• Unscored —
  CVE-2017-1000201

  The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack

  Nov 17, 2017
• Unscored —
  CVE-2017-1000197

  October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creatin…

  Nov 17, 2017
• Unscored —
  CVE-2017-1000176

  In SWFTools, a memcpy buffer overflow was found in swfc.

  swftools Ubuntu
  Nov 17, 2017
• Critical 9.8
  CVE-2017-1000220

  PIDUsage Enables OS Command Injection

  soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution

  pidusage npm
  Nov 17, 2017
• Unscored —
  CVE-2017-1000174

  In SWFTools, an address access exception was found in swfdump swf_GetBits().

  swftools Ubuntu
  Nov 17, 2017
• Unscored —
  CVE-2017-1000185

  In SWFTools, a memcpy buffer overflow was found in gif2swf.

  swftools Ubuntu
  Nov 17, 2017
• Unscored —
  CVE-2017-1000186

  In SWFTools, a stack overflow was found in pdf2swf.

  swftools Ubuntu
  Nov 17, 2017
• Unscored —
  CVE-2017-1000213

  WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user_se…

  Nov 17, 2017
• Unscored —
  CVE-2017-1000187

  In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF()

  swftools Ubuntu
  Nov 17, 2017
• Unscored —
  CVE-2017-1000182

  In SWFTools, a memory leak was found in wav2swf.

  swftools Ubuntu
  Nov 17, 2017
• Unscored —
  CVE-2017-1000210

  picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of servic…

  Nov 17, 2017
• Critical 9.8
  CVE-2017-1000219

  Command Execution in windows-cpu

  npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user

  windows-cpu npm
  Nov 17, 2017
• Unscored —
  CVE-2017-1000218

  LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services …

  Nov 17, 2017
• Unscored —
  CVE-2017-1000224

  CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin

  Web / CMS
  Nov 17, 2017
• Unscored —
  CVE-2017-1000158

  CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringo…

  python3.4 python3.5 python2.7 python-py Debian Ubuntu Azure Linux Alpine
  Nov 17, 2017
• Unscored —
  CVE-2017-15517

  AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vecto…

  NETAPP AltaVault OST Plug-in
  Nov 17, 2017