Archive
12 December 2017
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin…
-
Unscored —
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jque…
-
Unscored —
The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel throu…
-
Unscored —
URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SA…
-
Unscored —
SAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does not perform authentic…
-
Unscored —
SAP Note Assistant tool (SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7.50 to 7.52) supports u…
-
Unscored —
A malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program for SAP Plant Connectivi…
-
Unscored —
Two potential audit log injections in SAP HANA extended application services 1.0, advanced model: 1) Certain HTTP/REST …
-
Unscored —
SAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40, from 7.50 to 7.52, allo…
-
Unscored —
Denial of Service (DOS) in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could allow an attacker to pre…
-
Unscored —
Cross-Site scripting (XSS) in SAP Business Warehouse Universal Data Integration, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7…
-
Unscored —
Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and …
-
Unscored —
A Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL 64Unicode 7.21, 7.21EX…
-
Unscored —
The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Da…
-
Unscored —
Cross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management Application, Enterprise 4.10…
-
Unscored —
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aub…
-
Medium 5.5
Aubio is vulnerable to a NULL pointer dereference
A NULL pointer dereference (DoS) Vulnerability was found in the function aubio_source_avcodec_readframe in io/source_avcodec.c of aubio 0.4.6, which may lead to DoS when playing a crafted audio file.
-
Unscored —
The Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the Intent URI scheme. This v…