4 December 2017

22 results · Feed

• Unscored —
  CVE-2017-12079

  Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-…

  Synology Photo Station
  Dec 4, 2017
• Unscored —
  CVE-2017-12080

  An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 an…

  Synology Photo Station
  Dec 4, 2017
• Unscored —
  CVE-2017-15889 Public exploit EPSS 74%

  Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote auth…

  Synology DiskStation Manager (DSM)
  Dec 4, 2017
• Unscored —
  CVE-2017-16721

  A Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and prior. This vulnerabili…

  Dec 4, 2017
• Unscored —
  CVE-2017-17057

  There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtrati…

  Dec 4, 2017
• Unscored —
  CVE-2017-17056

  The ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the application user using a …

  Dec 4, 2017
• Unscored —
  CVE-2017-17121

  The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers t…

  binutils binutils Debian Ubuntu
  Dec 4, 2017
• Unscored —
  CVE-2017-17112

  ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoC…

  Dec 4, 2017
• Unscored —
  CVE-2017-17126

  The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of servic…

  binutils Debian
  Dec 4, 2017
• Unscored —
  CVE-2017-17127

  The vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to cause a denial of service…

  libav Ubuntu
  Dec 4, 2017
• Unscored —
  CVE-2017-17128

  The h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to cause a denial of serv…

  libav Ubuntu
  Dec 4, 2017
• Unscored —
  CVE-2017-17114

  ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0…

  Dec 4, 2017
• Unscored —
  CVE-2017-17129

  The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers to cause a denial of se…

  Dec 4, 2017
• Unscored —
  CVE-2017-17124

  The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist…

  binutils binutils Debian Ubuntu
  Dec 4, 2017
• Unscored —
  CVE-2017-17102

  Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].

  Dec 4, 2017
• Unscored —
  CVE-2017-17122

  The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflow…

  binutils binutils Debian Ubuntu
  Dec 4, 2017
• Unscored —
  CVE-2017-17104

  Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or…

  Dec 4, 2017
• Unscored —
  CVE-2017-17125

  nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a de…

  binutils binutils Debian Ubuntu
  Dec 4, 2017
• Unscored —
  CVE-2017-17130

  The ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote attackers to cause a denial…

  Dec 4, 2017
• Unscored —
  CVE-2017-17103

  Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability c…

  Dec 4, 2017
• Unscored —
  CVE-2017-17123

  The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distribu…

  binutils binutils Debian Ubuntu
  Dec 4, 2017
• Unscored —
  CVE-2017-17113

  ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoContro…

  Dec 4, 2017