Archive
November 2017
Vulnerabilities first published in this month (UTC), newest first.
1,068 results · Feed
-
Unscored —CVE-2017-16902 Public exploit
On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or log…
-
Unscored —
An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack …
-
Unscored —
The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, …
-
Unscored —
A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, al…
-
Unscored —
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login pa…
-
Unscored —
The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contain…
-
High 8.8
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, use…
-
Unscored —
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling…
-
Unscored —
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete fir…
-
Unscored —
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in O…
-
Medium 4.3
Moodle Exposure of Sensitive Information to an Unauthorized Actor
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing em…
-
Unscored —
In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passw…
-
Unscored —
In Bftpd before 4.7, there is a memory leak in the file rename function.
-
Unscored —
Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file …
-
Unscored —
The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereferen…
-
Unscored —
b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarUR…
-
Medium 6.1
Securimage HTML Injection
HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example_form.ajax.php or example_form.php.
-
Unscored —
On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attac…
-
High 8.8
Opencast RCE Vulnerability
Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.
-
Unscored —
exiv2 0.26 contains a Stack out of bounds read in webp parser
-
Medium 6.5
Opencast has Incorrect Permission Assignment
In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so that users only need to match part of the user name used for the access restrict…
-
Unscored —
Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser
-
Unscored —
Exiv2 0.26 contains a heap buffer overflow in tiff parser
-
Medium 6.1
filp whoops Cross-site Scripting vulnerability
The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS.
-
Unscored —
Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almos…
-
Critical 9.1
SimpleXML has XML External Entity (XXE) vulnerability
SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.
-
Unscored —
The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 p…
-
Medium 6.1CVE-2017-1000163 Scanner template
Phoenix Arbitrary URL Redirect
The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or social engineering attacks.
-
Unscored —
VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files load…
-
Unscored —
hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds acc…
-
Unscored —
ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote cod…
-
Unscored —
The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and…
-
Unscored —
On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (…
-
High 7.5
jqueryFileTree vulnerable to Directory Traversal
jqueryFileTree 2.1.5 and older Directory Traversal
-
Unscored —
QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. This can lea…
-
Medium 6.5
scalarmult() vulnerable to degenerate public keys
sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys
-
Unscored —
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur.
-
Unscored —
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface.
-
Unscored —
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused.
-
High 7.5
Next.js Directory Traversal Vulnerability
ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information.