Archive
February 2018
Vulnerabilities first published in this month (UTC), newest first.
1,330 results · Feed
-
Unscored —
Reflected cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
-
Unscored —
In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific spac…
-
Unscored —
A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to o…
-
Unscored —
Under certain conditions an unauthenticated malicious user can prevent legitimate users from accessing the SAP Internet…
-
Unscored —
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML Exte…
-
Unscored —
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server …
-
Unscored —
In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed application…
-
Unscored —
A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could e…
-
Unscored —
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server …
-
Unscored —
Under certain conditions SAP Internet Graphics Server (IGS) 7.20, 7.20EXT, 7.45, 7.49, 7.53, fails to validate XML Exte…
-
Unscored —
Under certain conditions a malicious user provoking a divide by zero crash can prevent legitimate users from accessing …
-
Unscored —
Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to e…
-
Unscored —
Under certain conditions a malicious user provoking an out of bounds buffer overflow can prevent legitimate users from …
-
Unscored —
In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by eval…
-
Unscored —
Under certain conditions a malicious user may retrieve information on SAP Internet Graphic Server (IGS), 7.20, 7.20EXT,…
-
Unscored —
Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would oth…
-
Unscored —
A vulnerability in the SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53, could allow a malicious user to s…
-
Unscored —
Under certain conditions a malicious user can prevent legitimate users from accessing the SAP Internet Graphics Server …
-
Unscored —
Stored cross-site scripting vulnerability in SAP internet Graphics Server, 7.20, 7.20EXT, 7.45, 7.49, 7.53.
-
Unscored —
A Denial of Service vulnerability was found in Apache Qpid Dispatch Router versions 0.7.0 and 0.8.0. To exploit this vu…
-
Unscored —
DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/i…
-
Unscored —
An Improper Authentication issue was discovered in WAGO PFC200 Series 3S CoDeSys Runtime versions 2.3.X and 2.4.X. An a…
-
Unscored —
A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root priv…
-
Unscored —
In CCN-lite 2, the Parser of NDNTLV does not verify whether a certain component's length field matches the actual compo…
-
High 7.8
systemd-tmpfiles in systemd through 237 mishandles symlinks present in non-terminal path components, which allows local…
-
Unscored —
IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line s…
-
Unscored —
IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL …
-
Unscored —
IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain …
-
Low 3.7CVE-2017-15709 EPSS 23%
ActiveMQ's OpenWire protocol exposes certain system details as plain text
When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.
-
Unscored —
An issue was discovered in QPDF before 7.0.0. Endless recursion causes stack exhaustion in QPDFTokenizer::resolveLitera…
-
Unscored —
An issue was discovered in GNU patch through 2.7.6. There is a segmentation fault, associated with a NULL pointer deref…
-
Unscored —
A double free exists in the another_hunk function in pch.c in GNU patch through 2.7.6.
-
Unscored —
An issue was discovered in GNU patch before 2.7.6. Out-of-bounds access within pch_write_line() in pch.c can possibly l…
-
Unscored —
An issue was discovered in QPDF before 7.0.0. There is an infinite loop in the QPDFWriter::enqueueObject() function in …
-
Unscored —
An issue was discovered in QPDF before 7.0.0. There is an infinite loop due to looping xref tables in QPDF.cc.
-
Unscored —
An issue was discovered in QPDF before 7.0.0. There is a large heap-based out-of-bounds read in the Pl_Buffer::write fu…
-
Unscored —
An issue was discovered in QPDF before 7.0.0. There is a stack-based out-of-bounds read in the function iterate_rc4 in …
-
Unscored —
PHP Scripts Mall News Website Script 2.0.4 has SQL Injection via a search term.
-
Unscored —
In CCN-lite 2, the function ccnl_prefix_to_str_detailed can cause a buffer overflow, when writing a prefix to the buffe…
-
Unscored —
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause …