2017 CVEs (page 128)
Page 128 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7948 | High | 7.8 | 2017-04-19 | Integer overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (out-of-bounds write and applicati… |
CVE-2017-7850 | High | 7.8 | 2017-04-19 | Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode. |
CVE-2017-7849 | Medium | 5.5 | 2017-04-19 | Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode. |
CVE-2017-7946 | Medium | 5.5 | 2017-04-18 | The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and applicati… |
CVE-2017-7943 | Medium | 6.5 | 2017-04-18 | The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. |
CVE-2017-7942 | Medium | 6.5 | 2017-04-18 | The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. |
CVE-2017-7941 | Medium | 6.5 | 2017-04-18 | The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted file. |
CVE-2017-7940 | Medium | 5.5 | 2017-04-18 | The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via… |
CVE-2017-7939 | Medium | 5.5 | 2017-04-18 | The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (stack-based… |
CVE-2017-7897 | Medium | 6.1 | 2017-04-18 | A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information… |
CVE-2017-5656 | High | 7.5 | 2017-04-18 | Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means that an attacker co… |
CVE-2017-5653 | Medium | 5.3 | 2017-04-18 | JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows re… |
CVE-2017-7896 | Medium | 6.1 | 2017-04-18 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS. |
CVE-2017-7645 | High | 7.5 | 2017-04-18 | The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long… |
CVE-2017-5662 | High | 7.3 | 2017-04-18 | In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send maliciously formed SVG fil… |
CVE-2017-5661 | High | 7.3 | 2017-04-18 | In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files… |
CVE-2017-7892 | High | 7.5 | 2017-04-17 | Sandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A remote attacker can trigger a segfault in a 32-bit libcapnp ap… |
CVE-2017-5645 | Critical | 9.8 | 2017-04-17 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially… |
CVE-2017-1161 | High | 7.3 | 2017-04-17 | IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Port… |
CVE-2017-1160 | Medium | 5.4 | 2017-04-17 | IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed a… |
CVE-2017-5659 | High | 7.5 | 2017-04-17 | Apache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content length and chunked encoding. |
CVE-2017-5651 | Critical | 9.8 | 2017-04-17 | In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file processing. If the… |
CVE-2017-5650 | High | 7.5 | 2017-04-17 | In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the handling of an HTTP/2 GOAWAY frame for a connection did not close streams associated with that… |
CVE-2017-5648 | Critical | 9.1 | 2017-04-17 | While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0.0.RC1 to 8… |
CVE-2017-5647 | High | 7.5 | 2017-04-17 | A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0… |
CVE-2017-7891 | Medium | 6.1 | 2017-04-17 | sourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter. |
CVE-2017-7889 | High | 7.8 | 2017-04-17 | The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIG_STRICT_DEVMEM protection mechanism, which allows local users to read or w… |
CVE-2017-7885 | High | 7.1 | 2017-04-17 | Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process me… |
CVE-2017-7615 | High | 8.8 | 2017-04-16 | MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php. |
CVE-2017-7882 | Critical | 9.8 | 2017-04-15 | LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx. |
CVE-2017-7881 | High | 8.8 | 2017-04-15 | BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/de… |
CVE-2017-7879 | High | 7.5 | 2017-04-14 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database. |
CVE-2017-7878 | Critical | 9.8 | 2017-04-14 | SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database. |
CVE-2017-7877 | High | 8.8 | 2017-04-14 | CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations. |
CVE-2017-7875 | Critical | 9.8 | 2017-04-14 | In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write whil… |
CVE-2017-7871 | Medium | 6.1 | 2017-04-14 | trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter). |
CVE-2017-7717 | High | 8.8 | 2017-04-14 | SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execut… |
CVE-2017-7696 | High | 7.5 | 2017-04-14 | SAP AS JAVA SSO Authentication Library 2.0 through 3.0 allow remote attackers to cause a denial of service (memory consumption) via large values in the width a… |
CVE-2017-7690 | High | 7.8 | 2017-04-14 | Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program. |
CVE-2017-7357 | Critical | 9.1 | 2017-04-14 | Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file. |
CVE-2017-7188 | Medium | 5.4 | 2017-04-14 | Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL in the returnUrl parameter to default/tog… |
CVE-2017-6554 | High | 7.2 | 2017-04-14 | pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently… |
CVE-2017-1205 | High | 8.8 | 2017-04-14 | IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-Force ID… |
CVE-2017-1152 | Medium | 4.3 | 2017-04-14 | IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in furthe… |
CVE-2017-7643 | High | 7.8 | 2017-04-14 | Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid program. |
CVE-2017-7457 | Medium | 5.0 | 2017-04-14 | XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure. |
CVE-2017-7456 | High | 7.5 | 2017-04-14 | Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials. |
CVE-2017-7455 | High | 7.5 | 2017-04-14 | Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control. |
CVE-2017-7408 | High | 7.5 | 2017-04-14 | Palo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service by leveraging improper validation of requests to revoke a Traps… |
CVE-2017-7218 | High | 7.8 | 2017-04-14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters. |
CVE-2017-7217 | Medium | 4.3 | 2017-04-14 | The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified… |
CVE-2017-7870 | Critical | 9.8 | 2017-04-14 | LibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function in tools/source/… |
CVE-2017-7869 | High | 7.5 | 2017-04-14 | GnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based buffer overflow related to the cdk_pkt_read function in opencd… |
CVE-2017-7868 | High | 7.5 | 2017-04-14 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8Tex… |
CVE-2017-7867 | High | 7.5 | 2017-04-14 | International Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write caused by a heap-based buffer overflow related to the utf8Tex… |
CVE-2017-7866 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow related to the decode_zbuf function in libavcodec/pngdec.c. |
CVE-2017-7865 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the ipvideo_decode_block_opcode_0xA function in libavcode… |
CVE-2017-7864 | Critical | 9.8 | 2017-04-14 | FreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow related to the tt_size_reset function in truetype/ttobjs.c. |
CVE-2017-7863 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame_common function in libavcodec/pngdec.c. |
CVE-2017-7862 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow related to the decode_frame function in libavcodec/pictordec.c. |
CVE-2017-7861 | Critical | 9.8 | 2017-04-14 | Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c. |
CVE-2017-7860 | Critical | 9.8 | 2017-04-14 | Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client_channel/p… |
CVE-2017-7859 | Critical | 9.8 | 2017-04-14 | FFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow related to the ff_h264_slice_context_init function in libavcodec/h26… |
CVE-2017-7858 | Critical | 9.8 | 2017-04-14 | FreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in truetype/ttgxvar.c and the sfnt_init_face function in sfnt/sfo… |
CVE-2017-7857 | Critical | 9.8 | 2017-04-14 | FreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow related to the TT_Get_MM_Var function in truetype/ttgxvar.c and… |
CVE-2017-7856 | Critical | 9.8 | 2017-04-14 | LibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow in the SVMConverter::ImplConvertFromSVM1 function in vcl/source… |
CVE-2017-7725 | Medium | 6.1 | 2017-04-13 | concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concret… |
CVE-2017-7854 | Medium | 5.5 | 2017-04-13 | The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra… |
CVE-2017-7853 | High | 7.5 | 2017-04-13 | In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser… |
CVE-2017-7219 | High | 8.8 | 2017-04-13 | A heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5 before 65.11, 11.0 before 70.12, and 11.1 before 52.13 allows… |
CVE-2017-7628 | Critical | 9.8 | 2017-04-13 | The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this v… |
CVE-2017-7627 | Medium | 5.3 | 2017-04-13 | The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check). |
CVE-2017-7626 | Medium | 6.1 | 2017-04-13 | The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method). |
CVE-2017-7748 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. T… |
CVE-2017-7747 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture file. This was addres… |
CVE-2017-7746 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malformed capture file… |
CVE-2017-7745 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a malformed capture fil… |
CVE-2017-7705 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection or a malformed captu… |
CVE-2017-7704 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed in… |
CVE-2017-7703 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. This was addressed… |
CVE-2017-7702 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malformed capture file… |
CVE-2017-7701 | High | 7.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. T… |
CVE-2017-7700 | Medium | 6.5 | 2017-04-12 | In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was addr… |
CVE-2017-7284 | High | 8.8 | 2017-04-12 | An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change the password of the… |
CVE-2017-7281 | High | 8.8 | 2017-04-12 | An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in r… |
CVE-2017-7280 | Critical | 9.8 | 2017-04-12 | An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. User input is not properly filtered before being sent to a pop… |
CVE-2017-7279 | Critical | 9.8 | 2017-04-12 | An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" cookie issued at login. |
CVE-2017-5936 | High | 7.5 | 2017-04-12 | OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers… |
CVE-2017-6059 | High | 7.5 | 2017-04-12 | Mod_auth_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod_auth_openidc) before 2.14 allows remote attackers to spoof pag… |
CVE-2017-7742 | Medium | 5.5 | 2017-04-12 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with read memory access… |
CVE-2017-7741 | Medium | 5.5 | 2017-04-12 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a segmentation violation (with write memory acces… |
CVE-2017-7722 | Critical | 10.0 | 2017-04-12 | In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the def… |
CVE-2017-7719 | Critical | 9.8 | 2017-04-12 | SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calenda… |
CVE-2017-7716 | Medium | 5.5 | 2017-04-12 | The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and appl… |
CVE-2017-3125 | Medium | 6.1 | 2017-04-12 | An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in the security contex… |
CVE-2017-3065 | High | 7.8 | 2017-04-12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption vulnerability in th… |
CVE-2017-3064 | High | 7.8 | 2017-04-12 | Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation co… |
CVE-2017-3063 | Critical | 9.8 | 2017-04-12 | Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. Successful exploitati… |
CVE-2017-3062 | Critical | 9.8 | 2017-04-12 | Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/setter property. Su… |
CVE-2017-3061 | Critical | 9.8 | 2017-04-12 | Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to… |