2017 CVEs (page 139)
Page 139 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-6578 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_l… |
CVE-2017-6577 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/subscriber_l… |
CVE-2017-6576 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/cam… |
CVE-2017-6575 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_m… |
CVE-2017-6574 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit_m… |
CVE-2017-6573 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/edit-l… |
CVE-2017-6572 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/lists/add_me… |
CVE-2017-6571 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/vie… |
CVE-2017-6570 | High | 7.2 | 2017-03-09 | A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for WordPress. This affects ./inc/campaign/vie… |
CVE-2017-6562 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack. |
CVE-2017-6561 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack. |
CVE-2017-6560 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack. |
CVE-2017-6559 | Medium | 6.1 | 2017-03-09 | XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack. |
CVE-2017-6558 | Critical | 9.8 | 2017-03-09 | iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers… |
CVE-2017-6556 | Medium | 5.4 | 2017-03-09 | Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adm… |
CVE-2017-6555 | Medium | 5.4 | 2017-03-09 | Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web scrip… |
CVE-2017-6552 | High | 7.5 | 2017-03-09 | Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within min… |
CVE-2017-6549 | High | 8.8 | 2017-03-09 | Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51… |
CVE-2017-6548 | Critical | 9.8 | 2017-03-09 | Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-A… |
CVE-2017-6547 | Medium | 6.1 | 2017-03-09 | Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC… |
CVE-2017-6544 | Medium | 6.1 | 2017-03-08 | Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter). |
CVE-2017-6543 | High | 7.3 | 2017-03-08 | Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authenticated attacker to… |
CVE-2017-1150 | Low | 3.1 | 2017-03-08 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables… |
CVE-2017-6541 | Medium | 6.1 | 2017-03-08 | Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (… |
CVE-2017-6540 | Medium | 6.1 | 2017-03-08 | Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (… |
CVE-2017-6539 | Medium | 6.1 | 2017-03-08 | Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (… |
CVE-2017-6538 | Medium | 6.1 | 2017-03-08 | A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (video) pas… |
CVE-2017-6537 | Medium | 6.1 | 2017-03-08 | A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (bgcolor) p… |
CVE-2017-6536 | Medium | 6.1 | 2017-03-08 | Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (… |
CVE-2017-6535 | Medium | 6.1 | 2017-03-08 | Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (… |
CVE-2017-6534 | Medium | 6.1 | 2017-03-08 | A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (pssid) pas… |
CVE-2017-6533 | Medium | 6.1 | 2017-03-08 | A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (benchmark)… |
CVE-2017-5178 | Critical | 9.8 | 2017-03-08 | An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These version… |
CVE-2017-0537 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission lev… |
CVE-2017-0536 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission… |
CVE-2017-0535 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission level… |
CVE-2017-0534 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0533 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0532 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission… |
CVE-2017-0531 | Medium | 4.7 | 2017-03-08 | An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels… |
CVE-2017-0529 | Medium | 5.5 | 2017-03-08 | An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This… |
CVE-2017-0528 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in the context of a priv… |
CVE-2017-0527 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0526 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0525 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2017-0524 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the con… |
CVE-2017-0523 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0522 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the context of a privileg… |
CVE-2017-0521 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context o… |
CVE-2017-0520 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the co… |
CVE-2017-0519 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within t… |
CVE-2017-0518 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within t… |
CVE-2017-0517 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitrary code within the… |
CVE-2017-0516 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious application to execute arbitrary code within the c… |
CVE-2017-0510 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of t… |
CVE-2017-0509 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0508 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0507 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0506 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue drive… |
CVE-2017-0505 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue drive… |
CVE-2017-0504 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue drive… |
CVE-2017-0503 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue drive… |
CVE-2017-0502 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue drive… |
CVE-2017-0501 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue drive… |
CVE-2017-0500 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen driver, GPU driver, and Command Queue drive… |
CVE-2017-0499 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Audioserver could enable a local malicious application to cause a device hang or reboot. This issue is rated as Low due to… |
CVE-2017-0498 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Setup Wizard could allow a local attacker to require Google account sign-in after a factory reset. This issue is rated as… |
CVE-2017-0497 | Medium | 4.7 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0496 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Setup Wizard could allow a local malicious application to temporarily block access to an affected device. This issue is ra… |
CVE-2017-0495 | Medium | 5.5 | 2017-03-08 | An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue i… |
CVE-2017-0494 | Medium | 5.5 | 2017-03-08 | An information disclosure vulnerability in AOSP Messaging could enable a remote attacker using a special crafted file to access data outside of its permission… |
CVE-2017-0492 | Medium | 5.5 | 2017-03-08 | An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entire screen. This iss… |
CVE-2017-0491 | Medium | 5.5 | 2017-03-08 | An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling applications or removi… |
CVE-2017-0490 | Medium | 5.5 | 2017-03-08 | An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is… |
CVE-2017-0489 | Medium | 5.5 | 2017-03-08 | An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data… |
CVE-2017-0488 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0487 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0486 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0485 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0484 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0483 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0482 | Medium | 5.5 | 2017-03-08 | A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated… |
CVE-2017-0481 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privileged process. This iss… |
CVE-2017-0480 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged… |
CVE-2017-0479 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged… |
CVE-2017-0478 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the con… |
CVE-2017-0477 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in libgdx could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unpr… |
CVE-2017-0476 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in AOSP Messaging could enable an attacker using a specially crafted file to cause memory corruption during media file an… |
CVE-2017-0475 | High | 7.8 | 2017-03-08 | An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within the context of the… |
CVE-2017-0474 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0473 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0472 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0471 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0470 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0469 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0468 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0467 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0466 | High | 7.8 | 2017-03-08 | A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and d… |
CVE-2017-0464 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of… |
CVE-2017-0463 | High | 7.0 | 2017-03-08 | An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the conte… |