2017 CVEs (page 130)
Page 130 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7694 | High | 8.8 | 2017-04-11 | Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute cod… |
CVE-2017-7691 | Critical | 9.8 | 2017-04-11 | A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592. |
CVE-2017-7689 | Critical | 9.8 | 2017-04-11 | A Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all versions before 1.5.0. |
CVE-2017-6088 | High | 7.2 | 2017-04-11 | Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1… |
CVE-2017-5969 | Medium | 4.7 | 2017-04-11 | libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted XML document. NOTE: Th… |
CVE-2017-7462 | Critical | 9.8 | 2017-04-11 | Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory. |
CVE-2017-7461 | Medium | 4.9 | 2017-04-11 | Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to r… |
CVE-2017-5873 | Medium | 6.7 | 2017-04-11 | Unquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20 allows local users to gain privileges via a Trojan horse executab… |
CVE-2017-5672 | Medium | 6.5 | 2017-04-11 | Kony Enterprise Mobile Management (EMM) before 4.2.5.2 has the vulnerability of disclosing the private key in clear-text when changing the parameters of the re… |
CVE-2017-7621 | Medium | 6.1 | 2017-04-11 | Cross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0 allows an Attacker to send malicious code, generally in the form… |
CVE-2017-7648 | High | 8.1 | 2017-04-10 | Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows remote attackers to defeat cryptographi… |
CVE-2017-7647 | High | 8.8 | 2017-04-10 | SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands. |
CVE-2017-7646 | Medium | 6.5 | 2017-04-10 | SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse the server's filesystem and read the contents of arbitrary fi… |
CVE-2017-7625 | Critical | 9.8 | 2017-04-10 | In Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "/dapur/apps/app_theme/libs/save_file.php" and then execute code. |
CVE-2017-7624 | Medium | 5.5 | 2017-04-10 | The iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of available memory via… |
CVE-2017-7623 | Medium | 5.5 | 2017-04-10 | The iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-bas… |
CVE-2017-7622 | High | 8.8 | 2017-04-10 | dde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with root privileges and hardly does anything to identify the user w… |
CVE-2017-7377 | Medium | 6.0 | 2017-04-10 | The (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allow local guest OS privileged users to cause a denial of serv… |
CVE-2017-7345 | Medium | 5.3 | 2017-04-10 | NetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP before 7.1P1 improperly bind the Java Management Extension Remote M… |
CVE-2017-7239 | Critical | 9.8 | 2017-04-10 | Ninka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate license compliance scan results, or cause a denial of service (proc… |
CVE-2017-7185 | High | 7.5 | 2017-04-10 | Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier… |
CVE-2017-5988 | High | 7.5 | 2017-04-10 | NetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote attackers to cause a denial of service via unspecified vectors. |
CVE-2017-5983 | Critical | 9.8 | 2017-04-10 | The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execut… |
CVE-2017-5607 | Low | 3.5 | 2017-04-10 | Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x befo… |
CVE-2017-7619 | High | 7.5 | 2017-04-10 | In ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in some of the color algorithms. This affects ModulateHSL, Modula… |
CVE-2017-7618 | High | 7.5 | 2017-04-10 | crypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service (API operation calling its own callback, and infinite recursion… |
CVE-2017-7617 | High | 8.8 | 2017-04-10 | Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a… |
CVE-2017-7616 | Medium | 5.5 | 2017-04-10 | Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensi… |
CVE-2017-6190 | High | 7.5 | 2017-04-10 | Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allows remote attackers to read arbitrary fil… |
CVE-2017-7614 | Critical | 9.8 | 2017-04-09 | elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined be… |
CVE-2017-7613 | Medium | 5.5 | 2017-04-09 | elflint.c in elfutils 0.168 does not validate the number of sections and the number of segments, which allows remote attackers to cause a denial of service (me… |
CVE-2017-7612 | Medium | 5.5 | 2017-04-09 | The check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application c… |
CVE-2017-7611 | Medium | 5.5 | 2017-04-09 | The check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and applicatio… |
CVE-2017-7610 | Medium | 5.5 | 2017-04-09 | The check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash… |
CVE-2017-7609 | Medium | 5.5 | 2017-04-09 | elf_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows remote attackers to cause a denial of service (memory consumption)… |
CVE-2017-7608 | Medium | 5.5 | 2017-04-09 | The ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-r… |
CVE-2017-7607 | Medium | 5.5 | 2017-04-09 | The handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a denial of service (heap-based buffer over-read and application c… |
CVE-2017-7606 | Medium | 6.5 | 2017-04-09 | coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote… |
CVE-2017-7605 | High | 7.8 | 2017-04-09 | aacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow remote attackers to cause a denial of service (application cra… |
CVE-2017-7604 | High | 7.8 | 2017-04-09 | au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of service… |
CVE-2017-7603 | High | 7.8 | 2017-04-09 | au_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might allow remote attackers to cause a denial of service (applicatio… |
CVE-2017-7602 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified o… |
CVE-2017-7601 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue, which might allow remote attackers to cause a denial of service (… |
CVE-2017-7600 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a… |
CVE-2017-7599 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior issue, which might allow remote attackers to cause a denial o… |
CVE-2017-7598 | High | 7.8 | 2017-04-09 | tif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image. |
CVE-2017-7597 | High | 7.8 | 2017-04-09 | tif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to… |
CVE-2017-7596 | High | 7.8 | 2017-04-09 | LibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior issue, which might allow remote attackers to cause a denial o… |
CVE-2017-7595 | Medium | 5.5 | 2017-04-09 | The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash)… |
CVE-2017-7594 | Medium | 5.5 | 2017-04-09 | The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a craft… |
CVE-2017-7593 | Medium | 5.5 | 2017-04-09 | tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from p… |
CVE-2017-7592 | High | 7.8 | 2017-04-09 | The putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior issue, which might allow remote attackers to cause a denial of… |
CVE-2017-7591 | Medium | 6.1 | 2017-04-09 | OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the _sortKeys parameter t… |
CVE-2017-7590 | Medium | 6.1 | 2017-04-09 | OpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by a crafted Managed Object… |
CVE-2017-7589 | Medium | 6.5 | 2017-04-09 | In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymous" user, as demonstrated by responses wi… |
CVE-2017-6033 | High | 7.8 | 2017-04-07 | A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versions. The software w… |
CVE-2017-6019 | High | 7.5 | 2017-04-07 | An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. A series of rapid requests to the dev… |
CVE-2017-0586 | Medium | 4.7 | 2017-04-07 | An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0585 | Medium | 4.7 | 2017-04-07 | An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0584 | Medium | 4.7 | 2017-04-07 | An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0583 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary code within the contex… |
CVE-2017-0582 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context… |
CVE-2017-0581 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2017-0580 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2017-0579 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0578 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2017-0577 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2017-0576 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the co… |
CVE-2017-0575 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0574 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0573 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0572 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0571 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0570 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0569 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0568 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0567 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0566 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2017-0565 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context… |
CVE-2017-0564 | High | 7.8 | 2017-04-07 | An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0563 | High | 7.8 | 2017-04-07 | An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2017-0562 | High | 7.8 | 2017-04-07 | An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the cont… |
CVE-2017-0561 | Critical | 9.8 | 2017-04-07 | A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the context of the Wi-Fi S… |
CVE-2017-0560 | Medium | 5.5 | 2017-04-07 | An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previous owner. This issue… |
CVE-2017-0559 | Medium | 5.5 | 2017-04-07 | An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission levels. This issue is ra… |
CVE-2017-0558 | Medium | 5.5 | 2017-04-07 | An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue i… |
CVE-2017-0557 | Medium | 5.5 | 2017-04-07 | An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0556 | Medium | 5.5 | 2017-04-07 | An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0555 | Medium | 5.5 | 2017-04-07 | An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its permission levels. Th… |
CVE-2017-0554 | High | 7.8 | 2017-04-07 | An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission… |
CVE-2017-0553 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service… |
CVE-2017-0552 | Medium | 5.5 | 2017-04-07 | A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Th… |
CVE-2017-0551 | Medium | 5.5 | 2017-04-07 | A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Th… |
CVE-2017-0550 | Medium | 5.5 | 2017-04-07 | A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Th… |
CVE-2017-0549 | Medium | 5.5 | 2017-04-07 | A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. Th… |
CVE-2017-0548 | Medium | 5.5 | 2017-04-07 | A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is ra… |
CVE-2017-0547 | Medium | 5.5 | 2017-04-07 | An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0546 | High | 7.8 | 2017-04-07 | An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the context of a privileg… |
CVE-2017-0545 | High | 7.8 | 2017-04-07 | An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged… |
CVE-2017-0544 | High | 7.8 | 2017-04-07 | An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. This issue is rated as High because… |