2017 CVEs (page 135)
Page 135 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5524 | Medium | 4.3 | 2017-03-23 | Plone 4.x through 4.3.11 and 5.x through 5.0.6 allow remote attackers to bypass a sandbox protection mechanism and obtain sensitive information by leveraging t… |
CVE-2017-5227 | High | 7.5 | 2017-03-23 | QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within t… |
CVE-2017-5207 | High | 7.8 | 2017-03-23 | Firejail before 0.9.44.4, when running a bandwidth command, allows local users to gain root privileges via the --shell argument. |
CVE-2017-5206 | Critical | 9.0 | 2017-03-23 | Firejail before 0.9.44.4, when running on a Linux kernel before 4.8, allows context-dependent attackers to bypass a seccomp-based sandbox protection mechanism… |
CVE-2017-7235 | High | 8.8 | 2017-03-23 | An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any… |
CVE-2017-6972 | Critical | 9.8 | 2017-03-22 | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka Ali… |
CVE-2017-3864 | High | 8.6 | 2017-03-22 | A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0 through 15.6) and Cisco IOS XE (3.3 through 3.7) could allow an unauthenti… |
CVE-2017-3859 | High | 7.5 | 2017-03-22 | A vulnerability in the DHCP code for the Zero Touch Provisioning feature of Cisco ASR 920 Series Aggregation Services Routers could allow an unauthenticated, r… |
CVE-2017-3858 | High | 8.8 | 2017-03-22 | A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that are executed with… |
CVE-2017-3857 | High | 7.5 | 2017-03-22 | A vulnerability in the Layer 2 Tunneling Protocol (L2TP) parsing function of Cisco IOS (12.0 through 12.4 and 15.0 through 15.6) and Cisco IOS XE (3.1 through… |
CVE-2017-3856 | High | 7.5 | 2017-03-22 | A vulnerability in the web user interface of Cisco IOS XE 3.1 through 3.17 could allow an unauthenticated, remote attacker to cause an affected device to reloa… |
CVE-2017-3853 | Critical | 9.8 | 2017-03-22 | A vulnerability in the Data-in-Motion (DMo) process installed with the Cisco IOx application environment could allow an unauthenticated, remote attacker to cau… |
CVE-2017-3852 | High | 8.1 | 2017-03-22 | A vulnerability in the Cisco application-hosting framework (CAF) component of the Cisco IOx application environment could allow an authenticated, remote attack… |
CVE-2017-3851 | High | 7.5 | 2017-03-22 | A Directory Traversal vulnerability in the web framework code of the Cisco application-hosting framework (CAF) component of the Cisco IOx application environme… |
CVE-2017-7231 | High | 7.8 | 2017-03-22 | pngdefry through 2017-03-22 is prone to a heap-based buffer-overflow vulnerability because it fails to properly process a specially crafted png file. This issu… |
CVE-2017-7230 | Critical | 9.8 | 2017-03-22 | A buffer overflow vulnerability in Disk Sorter Enterprise 9.5.12 and earlier allows remote attackers to execute arbitrary code via a GET request. |
CVE-2017-5673 | Medium | 6.1 | 2017-03-22 | In the Kunena extension 5.0.2 through 5.0.4 for Joomla!, the forum message subject (aka topic subject) accepts JavaScript, leading to XSS. Six files are affect… |
CVE-2017-7227 | High | 7.5 | 2017-03-22 | GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This rela… |
CVE-2017-7226 | Critical | 9.1 | 2017-03-22 | The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffe… |
CVE-2017-7225 | High | 7.5 | 2017-03-22 | The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, trigg… |
CVE-2017-7224 | Medium | 5.5 | 2017-03-22 | The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains… |
CVE-2017-7223 | High | 7.5 | 2017-03-22 | GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, pote… |
CVE-2017-6971 | High | 8.8 | 2017-03-22 | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow remote authenticated users to execute arbitrary commands in a privileged context, or launch… |
CVE-2017-6970 | High | 8.4 | 2017-03-22 | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 allow local users to execute arbitrary commands in a privileged context via an NfSen socket, aka A… |
CVE-2017-7222 | Medium | 6.1 | 2017-03-22 | A cross-site scripting (XSS) vulnerability in MantisBT before 2.1.1 allows remote attackers to inject arbitrary HTML or JavaScript (if MantisBT's CSP settings… |
CVE-2017-5874 | High | 8.8 | 2017-03-22 | CSRF exists on D-Link DIR-600M Rev. Cx devices before v3.05ENB01_beta_20170306. This can be used to bypass authentication and insert XSS sequences or possibly… |
CVE-2017-7215 | Medium | 6.1 | 2017-03-21 | Cross site scripting in some view elements in the index filter tool in app/webroot/js/misp2.4.68.js and the organisation landing page in app/View/Organisations… |
CVE-2017-7214 | Critical | 9.8 | 2017-03-21 | An issue was discovered in exception_wrapper.py in OpenStack Nova 13.x through 13.1.3, 14.x through 14.0.4, and 15.x through 15.0.1. Legacy notification except… |
CVE-2017-6417 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier… |
CVE-2017-6186 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Bitdefender Total Security 12.0 (and earlier), Internet Security 12.0 (and earlier), and Antivirus Plus 12.0 (and earlier) allo… |
CVE-2017-5567 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12… |
CVE-2017-5566 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in AVG Ultimate 17.1 (and earlier), AVG Internet Security 17.1 (and earlier), and AVG AntiVirus FREE 17.1 (and earlier) allows a l… |
CVE-2017-5565 | Medium | 6.7 | 2017-03-21 | Code injection vulnerability in Trend Micro Maximum Security 11.0 (and earlier), Internet Security 11.0 (and earlier), and Antivirus+ Security 11.0 (and earlie… |
CVE-2017-3850 | Medium | 5.9 | 2017-03-21 | A vulnerability in the Autonomic Networking Infrastructure (ANI) feature of Cisco IOS Software (15.4 through 15.6) and Cisco IOS XE Software (3.7 through 3.18… |
CVE-2017-3849 | High | 7.4 | 2017-03-21 | A vulnerability in the Autonomic Networking Infrastructure (ANI) registrar feature of Cisco IOS Software (possibly 15.2 through 15.6) and Cisco IOS XE Software… |
CVE-2017-7210 | Medium | 5.5 | 2017-03-21 | objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a… |
CVE-2017-7209 | Medium | 5.5 | 2017-03-21 | The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a pro… |
CVE-2017-7208 | High | 7.1 | 2017-03-21 | The decode_residual function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (buffer over-read) or obtain sensitive informatio… |
CVE-2017-7207 | Medium | 5.5 | 2017-03-21 | The mem_get_bits_rectangle function in Artifex Software, Inc. Ghostscript 9.20 allows remote attackers to cause a denial of service (NULL pointer dereference)… |
CVE-2017-7206 | High | 7.1 | 2017-03-21 | The ff_h2645_extract_rbsp function in libavcodec in libav 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read) or obtain sen… |
CVE-2017-7205 | Medium | 6.1 | 2017-03-21 | A Cross-Site Scripting (XSS) was discovered in GamePanelX-V3 3.0.12. The vulnerability exists due to insufficient filtration of user-supplied data (a) passed t… |
CVE-2017-7204 | Medium | 6.1 | 2017-03-21 | A Cross-Site Scripting (XSS) was discovered in imdbphp 5.1.1. The vulnerability exists due to insufficient filtration of user-supplied data (name) passed to th… |
CVE-2017-7203 | Medium | 6.1 | 2017-03-21 | A Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. The vulnerability exists due to insufficient filtration of user-supplied data (postLog… |
CVE-2017-7202 | Medium | 6.1 | 2017-03-21 | Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supp… |
CVE-2017-7200 | Medium | 5.8 | 2017-03-21 | An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked netwo… |
CVE-2017-6839 | Medium | 5.5 | 2017-03-20 | Integer overflow in modules/MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted… |
CVE-2017-6838 | Medium | 5.5 | 2017-03-20 | Integer overflow in sfcommands/sfconvert.c in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a craft… |
CVE-2017-6837 | Medium | 5.5 | 2017-03-20 | WAVE.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via vectors related to a large number of coef… |
CVE-2017-6836 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the Expand3To4Module::run function in libaudiofile/modules/SimpleModule.h in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3… |
CVE-2017-6835 | Medium | 5.5 | 2017-03-20 | The reset1 function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (di… |
CVE-2017-6834 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the ulaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0… |
CVE-2017-6833 | Medium | 5.5 | 2017-03-20 | The runPull function in libaudiofile/modules/BlockCodec.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (d… |
CVE-2017-6832 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the decodeBlock in MSADPCM.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0, 0.2.7 allow… |
CVE-2017-6831 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the decodeBlockWAVE function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6, 0.3.5, 0.3.4, 0.3.3, 0.3.2, 0.3.1, 0.3.0 and… |
CVE-2017-6830 | Medium | 5.5 | 2017-03-20 | Heap-based buffer overflow in the alaw2linear_buf function in G711.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of… |
CVE-2017-6829 | Medium | 5.5 | 2017-03-20 | The decodeSample function in IMA.cpp in Audio File Library (aka audiofile) 0.3.6 allows remote attackers to cause a denial of service (crash) via a crafted fil… |
CVE-2017-6805 | Medium | 5.3 | 2017-03-20 | Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a… |
CVE-2017-6803 | High | 8.8 | 2017-03-20 | Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface in the Scheduler in SolarWinds (formerly Serv-U) FTP Voyager 16.2.0 allow remot… |
CVE-2017-6550 | Critical | 9.8 | 2017-03-20 | Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson (formerly ESBUS) allow remote attackers to execute arbitrary SQL commands via the (1) TABLE param… |
CVE-2017-6356 | Medium | 5.3 | 2017-03-20 | Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to o… |
CVE-2017-6318 | High | 7.5 | 2017-03-20 | saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONTROL_OPTION packet. |
CVE-2017-6178 | High | 7.8 | 2017-03-20 | The IofCallDriver function in USBPcap 1.1.0.0 allows local users to gain privileges via a crafted 0x00090028 IOCTL call, which triggers a NULL pointer derefere… |
CVE-2017-6058 | High | 7.5 | 2017-03-20 | Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is enabled on the vmxnet3 device, allows… |
CVE-2017-5987 | Medium | 5.5 | 2017-03-20 | The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service… |
CVE-2017-5956 | Medium | 5.5 | 2017-03-20 | The vrend_draw_vbo function in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds array access and QEMU process… |
CVE-2017-5930 | Low | 2.7 | 2017-03-20 | The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delet… |
CVE-2017-5618 | High | 7.8 | 2017-03-20 | GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissio… |
CVE-2017-1155 | Medium | 4.3 | 2017-03-20 | IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP req… |
CVE-2017-1151 | High | 8.1 | 2017-03-20 | IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could allow a user… |
CVE-2017-1146 | Medium | 5.4 | 2017-03-20 | IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2017-1145 | High | 8.6 | 2017-03-20 | IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of service throu… |
CVE-2017-1134 | High | 7.8 | 2017-03-20 | IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference #: 1998459. |
CVE-2017-7187 | High | 7.8 | 2017-03-20 | The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or… |
CVE-2017-7186 | High | 7.5 | 2017-03-20 | libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application… |
CVE-2017-5623 | Medium | 6.6 | 2017-03-19 | An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem b… |
CVE-2017-7184 | High | 7.8 | 2017-03-19 | The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE upda… |
CVE-2017-7178 | High | 8.8 | 2017-03-18 | CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary progra… |
CVE-2017-7177 | High | 7.5 | 2017-03-18 | Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching. |
CVE-2017-7174 | Critical | 9.8 | 2017-03-17 | The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5. |
CVE-2017-3881 | Critical | 9.8 | 2017-03-17 | A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote at… |
CVE-2017-3880 | Medium | 6.5 | 2017-03-17 | An Authentication Bypass vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access limited meeting information on… |
CVE-2017-3879 | Medium | 5.3 | 2017-03-17 | A Denial of Service vulnerability in the remote login functionality for Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an unauthe… |
CVE-2017-3878 | Medium | 5.3 | 2017-03-17 | A Denial of Service vulnerability in the Telnet remote login functionality of Cisco NX-OS Software running on Cisco Nexus 9000 Series Switches could allow an u… |
CVE-2017-3877 | Medium | 6.5 | 2017-03-17 | A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an unauthenticated, remote attacker to conduct a cross-s… |
CVE-2017-3875 | Medium | 5.3 | 2017-03-17 | An Access-Control Filtering Mechanisms Bypass vulnerability in certain access-control filtering mechanisms on Cisco Nexus 7000 Series Switches could allow an u… |
CVE-2017-3874 | Medium | 5.4 | 2017-03-17 | A vulnerability in the web framework of Cisco Unified Communications Manager (CallManager) could allow an authenticated, remote attacker to perform a cross-sit… |
CVE-2017-3872 | Medium | 6.1 | 2017-03-17 | A cross-site scripting (XSS) filter bypass vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthent… |
CVE-2017-3871 | Medium | 4.3 | 2017-03-17 | A RADIUS Secret Disclosure vulnerability in the web network management interface of Cisco Prime Optical for Service Providers could allow an authenticated, rem… |
CVE-2017-3870 | Medium | 5.8 | 2017-03-17 | A vulnerability in the URL filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker t… |
CVE-2017-3869 | Medium | 5.4 | 2017-03-17 | An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that shou… |
CVE-2017-3868 | Medium | 6.1 | 2017-03-17 | A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (… |
CVE-2017-3867 | Medium | 5.3 | 2017-03-17 | A vulnerability in the Border Gateway Protocol (BGP) Bidirectional Forwarding Detection (BFD) implementation of Cisco Adaptive Security Appliance (ASA) Softwar… |
CVE-2017-3866 | Medium | 6.1 | 2017-03-17 | A vulnerability in the web framework code of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS… |
CVE-2017-3815 | Medium | 5.3 | 2017-03-17 | An API Privilege vulnerability in Cisco TelePresence Server Software could allow an unauthenticated, remote attacker to emulate Cisco TelePresence Server endpo… |
CVE-2017-3811 | Medium | 6.5 | 2017-03-17 | An XML External Entity vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to have read access to part of the informatio… |
CVE-2017-6880 | Critical | 9.8 | 2017-03-17 | Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact v… |
CVE-2017-6370 | Medium | 5.3 | 2017-03-17 | TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartex… |
CVE-2017-6969 | Critical | 9.1 | 2017-03-17 | readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crash… |
CVE-2017-6967 | High | 7.3 | 2017-03-17 | xrdp 0.9.1 calls the PAM function auth_start_session() in an incorrect location, leading to PAM session modules not being properly initialized, with a potentia… |
CVE-2017-6966 | Medium | 5.5 | 2017-03-17 | readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This… |