Archive
December 2017
Vulnerabilities first published in this month (UTC), newest first.
1,107 results · Feed
-
Unscored —
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or p…
-
Unscored —
In TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …
-
Unscored —
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.
-
Unscored —
validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended acces…
-
Unscored —
In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.
-
Unscored —
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or p…
-
Unscored —
In GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr.c in the gbr import pa…
-
Unscored —
Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows re…
-
Unscored —
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …
-
Unscored —
In GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins/file-fli/fli.c.
-
Unscored —
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …
-
Unscored —
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …
-
Unscored —
In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' chara…
-
Unscored —
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …
-
Unscored —
In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …
-
Unscored —
In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8.
-
Unscored —
In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs c…
-
Unscored —
In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.p…
-
Unscored —
In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or p…
-
Unscored —
Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request.
-
Unscored —
Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.
-
Unscored —
admin/configuration.php in Piwigo 2.9.2 has CSRF.
-
Unscored —
Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.
-
Unscored —
Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.
-
Unscored —
The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message…
-
Unscored —
Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the adm…
-
Unscored —
SuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protectio…
-
Unscored —CVE-2017-17761 Public exploit
An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 13…
-
Unscored —
A cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the esb-csv-import-export plugin through 1.1 for WordPress allow…
-
Unscored —
A cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inj…
-
Unscored —
The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated use…
-
Unscored —CVE-2017-17088 Public exploit
The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The w…
-
Unscored —
Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remot…
-
Unscored —
The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when …
-
Unscored —
TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacte…
-
Unscored —
TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacte…
-
Unscored —
Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of…
-
High 8.8
Apache Sling Authentication Service vulnerability
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.