Archive
5 January 2018
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function…
-
Unscored —
The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that trigg…
-
Unscored —
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inje…
-
Unscored —
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, r…
-
Unscored —
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.
-
Unscored —
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.
-
Unscored —
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable …
-
Unscored —
In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
-
Unscored —
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortun…
-
Unscored —
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0…
-
Unscored —
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0…
-
Unscored —
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0…
-
Unscored —
The "Sql Run Query" panel in WP-DBManager (aka Database Manager) plugin before 2.7.2 for WordPress allows remote attack…
-
Unscored —
(1) wp-dbmanager.php and (2) database-manage.php in the WP-DBManager (aka Database Manager) plugin before 2.7.2 for Wor…
-
Unscored —
The groups API in GitLab 6.x and 7.x before 7.4.3 allows remote authenticated guest users to modify ownership of arbitr…
-
Unscored —
TRENDnet TEW-823DRU devices with firmware before 1.00b36 have a hardcoded password of kcodeskcodes for the root account…
-
Unscored —
Xplico before 1.2.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the nam…
-
Unscored —
VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0) contain an out-of-bounds re…
-
Unscored —
VMware Workstation (14.x and 12.x) and Fusion (10.x and 8.x) contain a guest access control vulnerability. This issue m…
-
Unscored —
The VMware V4H and V4PA desktop agents (6.x before 6.5.1) contain a privilege escalation vulnerability. Successful expl…
-
Unscored —
A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple ins…
-
Unscored —
The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attacker…
-
Unscored —
An Improper Input Validation issue was discovered in Advantech WebAccess versions prior to 8.3. WebAccess allows some i…
-
Unscored —CVE-2017-16716 Public exploit
A SQL Injection issue was discovered in WebAccess versions prior to 8.3. WebAccess does not properly sanitize its input…
-
Unscored —
An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple …
-
Unscored —
A Path Traversal issue was discovered in WebAccess versions 8.3.2 and earlier. An attacker has access to files within t…