2017 CVEs (page 131)
Page 131 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-0543 | High | 7.8 | 2017-04-07 | A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0542 | High | 7.8 | 2017-04-07 | A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0541 | High | 7.8 | 2017-04-07 | A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0540 | High | 7.8 | 2017-04-07 | A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0539 | High | 7.8 | 2017-04-07 | A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0538 | High | 7.8 | 2017-04-07 | A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media… |
CVE-2017-0462 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0454 | High | 7.0 | 2017-04-07 | An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-7586 | Medium | 5.5 | 2017-04-07 | In libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-based buffer overflow… |
CVE-2017-7585 | Medium | 5.5 | 2017-04-07 | In libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow via a specially cra… |
CVE-2017-7584 | High | 7.8 | 2017-04-07 | Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a victim opens a spe… |
CVE-2017-7583 | Medium | 6.1 | 2017-04-07 | ILIAS before 5.2.3 has XSS via SVG documents. |
CVE-2017-7581 | Critical | 9.8 | 2017-04-07 | SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arbitrary SQL commands… |
CVE-2017-6606 | Medium | 6.4 | 2017-04-07 | A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted system to execute arb… |
CVE-2017-6604 | Medium | 6.1 | 2017-04-07 | A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a use… |
CVE-2017-6603 | Medium | 6.5 | 2017-04-07 | A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to cause a denial of ser… |
CVE-2017-6602 | Medium | 4.4 | 2017-04-07 | A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 93… |
CVE-2017-6601 | High | 7.1 | 2017-04-07 | A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepowe… |
CVE-2017-6600 | High | 7.8 | 2017-04-07 | A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepowe… |
CVE-2017-6599 | Medium | 5.3 | 2017-04-07 | A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the E… |
CVE-2017-6598 | Medium | 6.7 | 2017-04-07 | A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (N… |
CVE-2017-6597 | High | 7.8 | 2017-04-07 | A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW)… |
CVE-2017-3889 | Medium | 6.1 | 2017-04-07 | A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired… |
CVE-2017-3888 | Medium | 5.4 | 2017-04-07 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to conduct a reflec… |
CVE-2017-3887 | Medium | 5.9 | 2017-04-07 | A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, rem… |
CVE-2017-3886 | Medium | 4.9 | 2017-04-07 | A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confidentiality of the sy… |
CVE-2017-3885 | Medium | 5.9 | 2017-04-07 | A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an unauthenticated, re… |
CVE-2017-3884 | Medium | 6.5 | 2017-04-07 | A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote at… |
CVE-2017-3848 | Medium | 6.1 | 2017-04-07 | A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-sit… |
CVE-2017-3817 | Medium | 4.3 | 2017-04-07 | A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authenticated, remote attacke… |
CVE-2017-7579 | Medium | 6.1 | 2017-04-07 | inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field. |
CVE-2017-2387 | Medium | 4.8 | 2017-04-07 | The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-m… |
CVE-2017-7578 | High | 7.8 | 2017-04-07 | Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application crash) or possibly h… |
CVE-2017-7577 | Critical | 9.8 | 2017-04-07 | XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request. |
CVE-2017-7570 | High | 8.8 | 2017-04-07 | PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (such as .jpg) and th… |
CVE-2017-7576 | Critical | 9.8 | 2017-04-06 | DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the ven… |
CVE-2017-7575 | Critical | 9.8 | 2017-04-06 | Schneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the application-protection password via a \x00\x01\x00\x00\x00\x05\x01… |
CVE-2017-7574 | Critical | 9.8 | 2017-04-06 | Schneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3 devices have a hardcoded-key vulnerability. The Project Protection… |
CVE-2017-4964 | High | 8.8 | 2017-04-06 | Cloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted stemcell to execute arbitrary code on VMs created by the director, ak… |
CVE-2017-7572 | High | 8.1 | 2017-04-06 | The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-… |
CVE-2017-3834 | Critical | 9.8 | 2017-04-06 | A vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running Cisco Mobility Express Software could allow an unauthenticated… |
CVE-2017-3832 | High | 7.5 | 2017-04-06 | A vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to cause a deni… |
CVE-2017-7571 | High | 8.0 | 2017-04-06 | public/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges. |
CVE-2017-7569 | High | 8.6 | 2017-04-06 | In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url functio… |
CVE-2017-6884 | High | 8.8 | 2017-04-06 | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic… |
CVE-2017-7566 | High | 7.7 | 2017-04-06 | MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism. |
CVE-2017-7565 | High | 8.8 | 2017-04-06 | Splunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated users to execute arbitrary code, aka ERP-2041. |
CVE-2017-7237 | Critical | 9.8 | 2017-04-06 | The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by lev… |
CVE-2017-2675 | High | 7.8 | 2017-04-06 | Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the insta… |
CVE-2017-7192 | High | 7.5 | 2017-04-06 | WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true bu… |
CVE-2017-6968 | High | 8.8 | 2017-04-06 | GMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka PT-2017-03. |
CVE-2017-6130 | High | 7.4 | 2017-04-06 | F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domai… |
CVE-2017-5887 | High | 7.5 | 2017-04-06 | WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur i… |
CVE-2017-0305 | Critical | 9.8 | 2017-04-06 | F5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack that may allow modification of the BIG-IP system configuration… |
CVE-2017-7454 | Medium | 5.5 | 2017-04-06 | The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (heap-based b… |
CVE-2017-7453 | Medium | 5.5 | 2017-04-06 | The iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL pointer… |
CVE-2017-7452 | Medium | 5.5 | 2017-04-06 | The iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of service (NULL poi… |
CVE-2017-7450 | Critical | 9.8 | 2017-04-05 | AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. It is possible to extract all informati… |
CVE-2017-7448 | Medium | 5.5 | 2017-04-05 | The allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of service (divide-by… |
CVE-2017-7447 | High | 8.8 | 2017-04-05 | HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code. |
CVE-2017-7446 | High | 8.8 | 2017-04-05 | HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges. |
CVE-2017-7444 | High | 7.8 | 2017-04-05 | In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to the directory from w… |
CVE-2017-7443 | Medium | 6.1 | 2017-04-05 | apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad]… |
CVE-2017-0888 | Medium | 4.3 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. The top navigation bar displayed in the files list… |
CVE-2017-0887 | Medium | 4.3 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to not properly sanitizing values provided by the `OC-Total-Length… |
CVE-2017-0886 | Medium | 6.5 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an error in the application logic an authenticated adversary may trig… |
CVE-2017-0885 | Medium | 4.3 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. Due to an error in the application log… |
CVE-2017-0884 | Medium | 4.3 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. Due to a logical error in… |
CVE-2017-0883 | Medium | 6.4 | 2017-04-05 | Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing… |
CVE-2017-1180 | Medium | 5.3 | 2017-04-05 | The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference… |
CVE-2017-6340 | Medium | 5.4 | 2017-04-05 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name field, which allows a '… |
CVE-2017-6339 | Medium | 6.5 | 2017-04-05 | Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data. Per IWSVA documentation, by defaul… |
CVE-2017-6338 | Medium | 6.5 | 2017-04-05 | Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, remote user with low… |
CVE-2017-6975 | Medium | 6.8 | 2017-04-05 | Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. NOTE: because an operating syst… |
CVE-2017-6956 | High | 8.8 | 2017-04-05 | On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, leading to remote co… |
CVE-2017-0339 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0332 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0330 | Medium | 4.7 | 2017-04-05 | An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0329 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrar… |
CVE-2017-0328 | Medium | 4.7 | 2017-04-05 | An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0327 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0325 | High | 7.0 | 2017-04-05 | An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-7358 | High | 7.3 | 2017-04-05 | In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path locations and escalate… |
CVE-2017-2671 | Medium | 5.5 | 2017-04-05 | The ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cannot ensure that disc… |
CVE-2017-5649 | High | 7.5 | 2017-04-04 | Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ bu… |
CVE-2017-7418 | Medium | 5.5 | 2017-04-04 | ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks con… |
CVE-2017-7234 | Medium | 6.1 | 2017-04-04 | A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could… |
CVE-2017-7233 | Medium | 6.1 | 2017-04-04 | Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The securit… |
CVE-2017-0360 | Medium | 5.3 | 2017-04-04 | file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with… |
CVE-2017-7307 | Medium | 6.8 | 2017-04-04 | Riverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which makes it easier for physically proximate attackers to obtain root… |
CVE-2017-7306 | Medium | 6.4 | 2017-04-04 | Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vau… |
CVE-2017-7305 | Medium | 4.6 | 2017-04-04 | Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protect… |
CVE-2017-5670 | Medium | 4.6 | 2017-04-04 | Riverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm), which makes it easier for physically proximate attackers to obtain… |
CVE-2017-7414 | High | 7.5 | 2017-04-04 | In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled… |
CVE-2017-7413 | High | 8.8 | 2017-04-04 | In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Hord… |
CVE-2017-7398 | High | 8.8 | 2017-04-04 | D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability. This enables an attacker to perform an unwanted action on a wi… |
CVE-2017-7228 | High | 8.2 | 2017-04-04 | An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insuffi… |
CVE-2017-5683 | High | 7.8 | 2017-04-04 | Privilege escalation in IntelHAXM.sys driver in the Intel Hardware Accelerated Execution Manager before version 6.0.6 allows a local user to gain system level… |
CVE-2017-3204 | High | 8.1 | 2017-04-04 | The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to r… |
CVE-2017-7412 | High | 7.8 | 2017-04-04 | NixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain privileges by executing docker commands. |