2017 CVEs (page 103)
Page 103 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-8502 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
CVE-2017-8501 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Memory Corruption Vulnera… |
CVE-2017-8495 | High | 7.5 | 2017-07-11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703… |
CVE-2017-8486 | Medium | 4.7 | 2017-07-11 | Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and… |
CVE-2017-8467 | High | 7.0 | 2017-07-11 | Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 160… |
CVE-2017-8463 | High | 7.8 | 2017-07-11 | Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607… |
CVE-2017-0243 | High | 7.8 | 2017-07-11 | Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vul… |
CVE-2017-0170 | Medium | 6.5 | 2017-07-11 | Windows Performance Monitor in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold… |
CVE-2017-11171 | Medium | 5.5 | 2017-07-11 | Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local… |
CVE-2017-11170 | High | 8.8 | 2017-07-11 | The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in th… |
CVE-2017-7730 | High | 7.5 | 2017-07-11 | iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. |
CVE-2017-7729 | High | 7.5 | 2017-07-11 | On iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted in cleartext. |
CVE-2017-7728 | Critical | 9.8 | 2017-07-11 | On iSmartAlarm cube devices, there is authentication bypass leading to remote execution of commands (e.g., setting the alarm on/off), related to incorrect cryp… |
CVE-2017-7726 | High | 7.5 | 2017-07-11 | iSmartAlarm cube devices have an SSL Certificate Validation Vulnerability. |
CVE-2017-10600 | Medium | 5.9 | 2017-07-11 | ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image… |
CVE-2017-11164 | High | 7.5 | 2017-07-11 | In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular ex… |
CVE-2017-8032 | Medium | 6.6 | 2017-07-10 | In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3… |
CVE-2017-6735 | Medium | 6.7 | 2017-07-10 | A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary co… |
CVE-2017-6734 | Medium | 5.4 | 2017-07-10 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct… |
CVE-2017-6733 | Medium | 6.1 | 2017-07-10 | A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to co… |
CVE-2017-6732 | Medium | 6.7 | 2017-07-10 | A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attacker to elevate their privileges to root… |
CVE-2017-6731 | High | 7.5 | 2017-07-10 | A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attack… |
CVE-2017-6730 | Medium | 5.3 | 2017-07-10 | A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve… |
CVE-2017-6729 | High | 7.5 | 2017-07-10 | A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco… |
CVE-2017-6728 | High | 7.0 | 2017-07-10 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an af… |
CVE-2017-6727 | Medium | 5.3 | 2017-07-10 | A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to ca… |
CVE-2017-6726 | Medium | 5.5 | 2017-07-10 | A vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local attacker to retrieve system process information, which could… |
CVE-2017-5652 | High | 7.5 | 2017-07-10 | During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext even when the cluste… |
CVE-2017-5640 | Critical | 9.8 | 2017-07-10 | It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemons to skip authenti… |
CVE-2017-7175 | Critical | 9.9 | 2017-07-10 | NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Custom output format"… |
CVE-2017-7670 | High | 7.5 | 2017-07-10 | The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack. TCP connections made… |
CVE-2017-11166 | Medium | 6.5 | 2017-07-10 | The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number… |
CVE-2017-11163 | Medium | 5.4 | 2017-07-10 | Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via s… |
CVE-2017-9791 | Critical | 9.8 | 2017-07-10 | The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage. |
CVE-2017-1398 | Medium | 6.1 | 2017-07-10 | IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing attacks, using an o… |
CVE-2017-1337 | High | 8.1 | 2017-07-10 | IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text. IBM X-Force ID: 126245. |
CVE-2017-1284 | Medium | 4.7 | 2017-07-10 | IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive information from WebSphere Application Serve… |
CVE-2017-11147 | Critical | 9.1 | 2017-07-10 | In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter… |
CVE-2017-11145 | High | 7.5 | 2017-07-10 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able… |
CVE-2017-11144 | High | 7.5 | 2017-07-10 | In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing f… |
CVE-2017-11143 | High | 7.5 | 2017-07-10 | In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to cr… |
CVE-2017-11142 | High | 7.5 | 2017-07-10 | In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form… |
CVE-2017-11141 | Medium | 6.5 | 2017-07-10 | The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, relat… |
CVE-2017-11140 | Medium | 5.5 | 2017-07-10 | The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attacker… |
CVE-2017-11139 | Critical | 9.8 | 2017-07-10 | GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c. |
CVE-2017-11126 | Medium | 5.5 | 2017-07-10 | The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application… |
CVE-2017-11125 | Critical | 9.8 | 2017-07-10 | libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c. |
CVE-2017-11124 | Critical | 9.8 | 2017-07-10 | libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c. |
CVE-2017-8003 | Medium | 4.9 | 2017-07-09 | EMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote authenticated high privileged user may potentially exploit this vuln… |
CVE-2017-8002 | High | 8.8 | 2017-07-09 | EMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A remote authenticated attacker may potentially exploit these v… |
CVE-2017-4976 | Critical | 9.8 | 2017-07-09 | EMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a default password. A remote attacker with the knowledge of the defau… |
CVE-2017-11113 | High | 7.5 | 2017-07-08 | In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack… |
CVE-2017-11112 | High | 7.5 | 2017-07-08 | In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service… |
CVE-2017-11111 | High | 7.8 | 2017-07-08 | In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possi… |
CVE-2017-11110 | High | 7.8 | 2017-07-08 | The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possi… |
CVE-2017-11109 | High | 7.8 | 2017-07-08 | Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there… |
CVE-2017-11108 | High | 7.5 | 2017-07-08 | tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occur… |
CVE-2017-11107 | Medium | 6.1 | 2017-07-08 | phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter. |
CVE-2017-11104 | Medium | 5.9 | 2017-07-08 | Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and alg… |
CVE-2017-7512 | Critical | 9.8 | 2017-07-07 | Red Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation of an access token without a client secret. An attacker could u… |
CVE-2017-8442 | Medium | 6.5 | 2017-07-07 | Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch _nodes API leaking sensitive configuration information, su… |
CVE-2017-7660 | High | 7.5 | 2017-07-07 | Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that… |
CVE-2017-11102 | High | 7.5 | 2017-07-07 | The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during JNG readi… |
CVE-2017-11101 | High | 8.8 | 2017-07-07 | When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/swftools.c. |
CVE-2017-11100 | High | 8.8 | 2017-07-07 | When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c. |
CVE-2017-11099 | High | 8.8 | 2017-07-07 | When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c. |
CVE-2017-11098 | High | 8.8 | 2017-07-07 | When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() function in lib/png.c. |
CVE-2017-11097 | High | 8.8 | 2017-07-07 | When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c. |
CVE-2017-11096 | High | 8.8 | 2017-07-07 | When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function in lib/modules/swffilt… |
CVE-2017-9631 | High | 7.5 | 2017-07-07 | A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The null pointer derefer… |
CVE-2017-9629 | Critical | 9.8 | 2017-07-07 | A Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The stack-based buffe… |
CVE-2017-9627 | High | 8.6 | 2017-07-07 | An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior. The uncontroll… |
CVE-2017-6868 | High | 8.1 | 2017-07-07 | An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1. An unauthenticated remote attacker may be able to… |
CVE-2017-1000381 | High | 7.5 | 2017-07-07 | The c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer… |
CVE-2017-1000082 | Critical | 9.8 | 2017-07-07 | systemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. "0day"), running the service in question with root privileges rath… |
CVE-2017-10995 | Medium | 5.5 | 2017-07-07 | The mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause a denial of service (heap-based buffer over-read and applicat… |
CVE-2017-10994 | High | 7.3 | 2017-07-07 | Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a craf… |
CVE-2017-10991 | Medium | 6.1 | 2017-07-07 | The WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend parameters on the wps_referrers_page page. |
CVE-2017-10966 | Critical | 9.8 | 2017-07-07 | An issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could incorrectly use the GHashTable interface and free the nick wh… |
CVE-2017-10965 | Critical | 9.8 | 2017-07-07 | An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer. |
CVE-2017-0340 | High | 7.8 | 2017-07-07 | An elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into a fixed sized buffer with a user-controlled size could lead to… |
CVE-2017-0326 | Medium | 5.5 | 2017-07-07 | An information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read function in the Tegra Display Controller driver could result in… |
CVE-2017-2245 | Medium | 5.0 | 2017-07-07 | Directory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote attackers to read arbitrary files via unspecified vectors. |
CVE-2017-2244 | High | 8.8 | 2017-07-07 | Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrator… |
CVE-2017-2243 | Medium | 6.1 | 2017-07-07 | Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vect… |
CVE-2017-2239 | Medium | 5.3 | 2017-07-07 | Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript. |
CVE-2017-2238 | High | 8.8 | 2017-07-07 | Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A f… |
CVE-2017-2237 | Critical | 9.8 | 2017-07-07 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an atta… |
CVE-2017-2236 | Critical | 9.8 | 2017-07-07 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-code… |
CVE-2017-2235 | Critical | 9.8 | 2017-07-07 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an atta… |
CVE-2017-2234 | Critical | 9.8 | 2017-07-07 | Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remo… |
CVE-2017-2233 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain… |
CVE-2017-2232 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an u… |
CVE-2017-2231 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The… |
CVE-2017-2230 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 (cdrw_checker_3.1.0.lzh) and earlier allows remote attackers to gain privil… |
CVE-2017-2229 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL… |
CVE-2017-2227 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain p… |
CVE-2017-2226 | High | 7.8 | 2017-07-07 | Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privi… |
CVE-2017-2225 | Critical | 9.8 | 2017-07-07 | Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified… |
CVE-2017-2224 | Medium | 6.1 | 2017-07-07 | Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified… |