2017 CVEs (page 106)
Page 106 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-10760 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10759 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10758 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10757 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10756 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10755 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10754 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10753 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10752 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10751 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, r… |
CVE-2017-10750 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10749 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10748 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10747 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10746 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10745 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Bu… |
CVE-2017-10744 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Read Acc… |
CVE-2017-10743 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Stack Bu… |
CVE-2017-10742 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Exe… |
CVE-2017-10741 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10740 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10739 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Exe… |
CVE-2017-10738 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "Data Exe… |
CVE-2017-10737 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10736 | High | 7.8 | 2017-07-05 | XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mod… |
CVE-2017-10735 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10734 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10733 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10732 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to… |
CVE-2017-10731 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write A… |
CVE-2017-10730 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write A… |
CVE-2017-10729 | High | 7.8 | 2017-07-05 | IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .rle file, related to a "User Mode Write A… |
CVE-2017-10728 | High | 7.8 | 2017-07-05 | Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Error Code (0xe0… |
CVE-2017-10727 | High | 7.8 | 2017-07-05 | Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulti… |
CVE-2017-10726 | High | 7.8 | 2017-07-05 | Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulti… |
CVE-2017-10725 | High | 7.3 | 2017-07-05 | Winamp 5.666 Build 3516(x86) allows attackers to execute arbitrary code or cause a denial of service via a crafted .flv file, related to "Data from Faulting Ad… |
CVE-2017-1264 | High | 7.5 | 2017-07-05 | IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resources or functionality… |
CVE-2017-1254 | High | 7.1 | 2017-07-05 | IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnera… |
CVE-2017-1253 | Critical | 9.9 | 2017-07-05 | IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an… |
CVE-2017-1157 | Medium | 4.3 | 2017-07-05 | IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-F… |
CVE-2017-1144 | Low | 2.5 | 2017-07-05 | IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. IBM X-Force ID: 122033. |
CVE-2017-1096 | Medium | 5.4 | 2017-07-05 | IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… |
CVE-2017-1208 | Medium | 5.4 | 2017-07-05 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2017-1207 | Medium | 5.5 | 2017-07-05 | IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777. |
CVE-2017-1176 | Low | 3.3 | 2017-07-05 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. IBM… |
CVE-2017-1175 | Critical | 9.8 | 2017-07-05 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow… |
CVE-2017-1113 | Medium | 5.4 | 2017-07-05 | IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… |
CVE-2017-2295 | High | 8.2 | 2017-07-05 | Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with a attacker-specified format. This could… |
CVE-2017-2294 | High | 7.5 | 2017-07-05 | Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server private keys as sensitive (a feature added in Puppet 4.6), so key… |
CVE-2017-1269 | Critical | 9.8 | 2017-07-05 | IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attack… |
CVE-2017-1258 | Medium | 6.5 | 2017-07-05 | IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protec… |
CVE-2017-1256 | Medium | 6.1 | 2017-07-05 | IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a… |
CVE-2017-1217 | Medium | 6.1 | 2017-07-05 | IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a… |
CVE-2017-10929 | High | 7.8 | 2017-07-05 | The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and applic… |
CVE-2017-10928 | High | 8.8 | 2017-07-05 | In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive information from proc… |
CVE-2017-10923 | Medium | 6.5 | 2017-07-05 | Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash)… |
CVE-2017-10922 | High | 7.5 | 2017-07-05 | The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant t… |
CVE-2017-10921 | Critical | 10.0 | 2017-07-05 | The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS… |
CVE-2017-10920 | Critical | 10.0 | 2017-07-05 | The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, whi… |
CVE-2017-10919 | Medium | 6.5 | 2017-07-05 | Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223. |
CVE-2017-10918 | Critical | 10.0 | 2017-07-05 | Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-… |
CVE-2017-10917 | Critical | 9.1 | 2017-07-05 | Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dere… |
CVE-2017-10916 | High | 7.5 | 2017-07-05 | The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features… |
CVE-2017-10915 | Critical | 9.0 | 2017-07-05 | The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain X… |
CVE-2017-10914 | High | 8.1 | 2017-07-05 | The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory co… |
CVE-2017-10913 | Critical | 9.8 | 2017-07-05 | The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to o… |
CVE-2017-10912 | Critical | 10.0 | 2017-07-05 | Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217. |
CVE-2017-10911 | Medium | 6.5 | 2017-07-05 | The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from… |
CVE-2017-10810 | High | 7.5 | 2017-07-04 | Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a… |
CVE-2017-7276 | Medium | 6.1 | 2017-07-04 | There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019. |
CVE-2017-10805 | High | 8.8 | 2017-07-04 | In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the OAuth module allows… |
CVE-2017-10804 | Critical | 9.8 | 2017-07-04 | In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstan… |
CVE-2017-10803 | Medium | 6.5 | 2017-07-04 | In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the Database Anonymizati… |
CVE-2017-10807 | Critical | 9.8 | 2017-07-04 | JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled. |
CVE-2017-9313 | Medium | 6.1 | 2017-07-04 | Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via the sec parameter… |
CVE-2017-7317 | Critical | 9.8 | 2017-07-04 | An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin. |
CVE-2017-7316 | Medium | 6.1 | 2017-07-04 | An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page. |
CVE-2017-7315 | Critical | 9.8 | 2017-07-04 | An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials ar… |
CVE-2017-6725 | Medium | 6.1 | 2017-07-04 | A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… |
CVE-2017-6724 | Medium | 6.1 | 2017-07-04 | A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… |
CVE-2017-6722 | Medium | 6.1 | 2017-07-04 | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated… |
CVE-2017-6721 | Medium | 5.3 | 2017-07-04 | A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attac… |
CVE-2017-6719 | Medium | 6.7 | 2017-07-04 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system wit… |
CVE-2017-6718 | Medium | 6.7 | 2017-07-04 | A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSC… |
CVE-2017-6717 | Medium | 5.4 | 2017-07-04 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… |
CVE-2017-6716 | Medium | 5.4 | 2017-07-04 | A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scr… |
CVE-2017-6715 | Medium | 5.4 | 2017-07-04 | A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… |
CVE-2017-6706 | Medium | 5.1 | 2017-07-04 | A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker to acquire sensitive… |
CVE-2017-6705 | Medium | 5.5 | 2017-07-04 | A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire sensitive informat… |
CVE-2017-6704 | Medium | 6.5 | 2017-07-04 | A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to perform arbitrary fi… |
CVE-2017-6703 | Medium | 5.9 | 2017-07-04 | A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to hijack another use… |
CVE-2017-6702 | Medium | 6.1 | 2017-07-04 | A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack agains… |
CVE-2017-6701 | Medium | 6.1 | 2017-07-04 | A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct… |
CVE-2017-6700 | Medium | 6.1 | 2017-07-04 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthe… |
CVE-2017-6699 | Medium | 6.1 | 2017-07-04 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthe… |
CVE-2017-6698 | Medium | 5.4 | 2017-07-04 | A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, rem… |
CVE-2017-6605 | Medium | 5.4 | 2017-07-04 | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct a reflec… |
CVE-2017-3865 | Medium | 5.8 | 2017-07-04 | A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to terminate all activ… |
CVE-2017-9248 | Critical | 9.8 | 2017-07-03 | Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.Dialog… |
CVE-2017-7919 | Critical | 9.8 | 2017-07-03 | An Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may bypass authentication by accessing a specific uniform resource lo… |