2017 CVEs (page 25)
Page 25 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18128 | High | 7.5 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error… |
CVE-2017-18127 | Critical | 9.8 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 430, SD 450, SD 625, SD… |
CVE-2017-18126 | High | 7.5 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA6174A, QCA6574, QCA6… |
CVE-2017-18125 | High | 7.5 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SD… |
CVE-2017-18074 | Critical | 9.8 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9… |
CVE-2017-18073 | High | 7.5 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9650, SD 210/S… |
CVE-2017-18072 | High | 7.5 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9640, MDM9650, QCA4531, QCA6174A, QCA6… |
CVE-2017-18071 | Critical | 9.8 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, S… |
CVE-2017-11011 | Critical | 9.8 | 2018-04-11 | In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, SD 210/SD 212/SD 205, SD 425, SD 430, SD… |
CVE-2017-13678 | Medium | 4.8 | 2018-04-11 | Stored XSS vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A malicious appliance administrator can inject arbitrar… |
CVE-2017-13677 | High | 7.5 | 2018-04-11 | Denial-of-service (DoS) vulnerability in the Symantec Advanced Secure Gateway (ASG) and ProxySG management consoles. A remote attacker can use crafted HTTP/HTT… |
CVE-2017-9839 | High | 8.8 | 2018-04-11 | Dolibarr ERP/CRM is affected by SQL injection in versions before 5.0.4 via product/stats/card.php (type parameter). |
CVE-2017-9838 | Medium | 5.4 | 2018-04-11 | Dolibarr ERP/CRM is affected by multiple reflected Cross-Site Scripting (XSS) vulnerabilities in versions before 5.0.4: index.php (leftmenu parameter), core/aj… |
CVE-2017-18260 | High | 8.8 | 2018-04-11 | Dolibarr ERP/CRM is affected by multiple SQL injection vulnerabilities in versions through 7.0.0 via comm/propal/list.php (viewstatut parameter) or comm/propal… |
CVE-2017-18259 | Medium | 5.4 | 2018-04-11 | Dolibarr ERP/CRM is affected by stored Cross-Site Scripting (XSS) in versions through 7.0.0. |
CVE-2017-14611 | Critical | 9.1 | 2018-04-10 | SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url paramete… |
CVE-2017-14323 | Critical | 9.8 | 2018-04-10 | SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack i… |
CVE-2017-18101 | Medium | 6.5 | 2018-04-10 | Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version… |
CVE-2017-18100 | Medium | 6.1 | 2018-04-10 | The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XS… |
CVE-2017-1081 | High | 7.5 | 2018-04-10 | In FreeBSD before 11.0-STABLE, 11.0-RELEASE-p10, 10.3-STABLE, and 10.3-RELEASE-p19, ipfilter using "keep state" or "keep frags" options can cause a kernel pani… |
CVE-2017-2826 | Low | 3.7 | 2018-04-09 | An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zab… |
CVE-2017-18258 | Medium | 6.5 | 2018-04-08 | The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, beca… |
CVE-2017-18098 | Medium | 6.1 | 2018-04-06 | The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting… |
CVE-2017-18097 | Medium | 5.4 | 2018-04-06 | The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jira administrator to import their Trello… |
CVE-2017-14473 | Critical | 10.0 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14472 | Critical | 10.0 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14471 | Critical | 10.0 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14470 | Critical | 10.0 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14469 | Critical | 10.0 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14468 | Critical | 9.8 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14467 | Critical | 9.8 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14466 | Critical | 9.8 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14465 | Critical | 9.8 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14464 | Critical | 9.8 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14463 | Critical | 9.8 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-14462 | Critical | 9.8 | 2018-04-05 | An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B… |
CVE-2017-12093 | Medium | 5.3 | 2018-04-05 | An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Bradley Micrologix 1400 Series B Firmware 21… |
CVE-2017-12090 | High | 7.7 | 2018-04-05 | An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below… |
CVE-2017-12089 | High | 8.6 | 2018-04-05 | An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A sp… |
CVE-2017-12088 | High | 8.6 | 2018-04-05 | An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 1400 Series B FRN 21.2 and below. A special… |
CVE-2017-2869 | Critical | 9.8 | 2018-04-05 | An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can cause… |
CVE-2017-2868 | Critical | 9.8 | 2018-04-05 | An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can c… |
CVE-2017-2867 | Critical | 9.8 | 2018-04-05 | An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8. A specially crafted network packet can… |
CVE-2017-2861 | High | 7.5 | 2018-04-05 | An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in Natus Xltek NeuroWorks 8. A specially cr… |
CVE-2017-2853 | Critical | 9.8 | 2018-04-05 | An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek NeuroWorks 8. A specially crafted network p… |
CVE-2017-12095 | Medium | 6.5 | 2018-04-05 | An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A series of WiFi packets can force Circle to… |
CVE-2017-0751 | Medium | 5.3 | 2018-04-05 | An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android ID: A-36591162. References: QC-CR#20450… |
CVE-2017-0748 | Medium | 5.3 | 2018-04-05 | An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Android ID: A-35764875. References: QC-CR#202… |
CVE-2017-0744 | Medium | 5.3 | 2018-04-05 | An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android kernel. Android ID: A-34112726. References… |
CVE-2017-0431 | High | 7.8 | 2018-04-05 | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32573899. |
CVE-2017-6426 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm SPMI driver. Product: Android. Versions: Android kernel. Android ID: A-33644474. References: QC-CR#1106… |
CVE-2017-6425 | Low | 3.3 | 2018-04-04 | An information disclosure vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-32577085. References: QC-CR#110… |
CVE-2017-6424 | High | 7.0 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm WiFi driver. Product: Android. Versions: Android kernel. Android ID: A-32086742. References: QC-CR#1102… |
CVE-2017-6423 | High | 7.0 | 2018-04-04 | An elevation of privilege vulnerability in the Qualcomm kyro L2 driver. Product: Android. Versions: Android kernel. Android ID: A-32831370. References: QC-CR#1… |
CVE-2017-1772 | Medium | 6.1 | 2018-04-04 | IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi… |
CVE-2017-1733 | Medium | 4.0 | 2018-04-04 | IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 134914. |
CVE-2017-1624 | Medium | 4.2 | 2018-04-04 | IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors… |
CVE-2017-18257 | Medium | 5.5 | 2018-04-04 | The __get_data_block function in fs/f2fs/data.c in the Linux kernel before 4.11 allows local users to cause a denial of service (integer overflow and loop) via… |
CVE-2017-13272 | Critical | 9.8 | 2018-04-04 | In alarm_ready_generic of alarm.cc, there is a possible out of bounds write due to a use after free. This could lead to remote escalation of privilege with no… |
CVE-2017-13271 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69006799. |
CVE-2017-13270 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-69474744. |
CVE-2017-13269 | Medium | 4.3 | 2018-04-04 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13268 | Medium | 4.3 | 2018-04-04 | A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13266 | Critical | 9.8 | 2018-04-04 | In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible stack corruption due to a missing bounds check. This could lead to remote code execution with n… |
CVE-2017-13265 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Android system (OTA updates). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-36232423. |
CVE-2017-13264 | High | 7.5 | 2018-04-04 | A other vulnerability in the Android media framework (Avcdec). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70294343. |
CVE-2017-13263 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 8.0, 8.1. Android ID: A-69383160. |
CVE-2017-13262 | Medium | 6.5 | 2018-04-04 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to remote information dis… |
CVE-2017-13261 | High | 7.5 | 2018-04-04 | In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information di… |
CVE-2017-13260 | High | 7.5 | 2018-04-04 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n… |
CVE-2017-13259 | High | 7.5 | 2018-04-04 | In functionality implemented in sdp_discovery.cc, there are possible out of bounds reads due to missing bounds checks. This could lead to remote information di… |
CVE-2017-13258 | High | 7.5 | 2018-04-04 | In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with n… |
CVE-2017-13257 | Medium | 6.5 | 2018-04-04 | In bta_pan_data_buf_ind_cback of bta_pan_act.cc there is a use after free that can result in an out of bounds read of memory allocated via malloc. This could l… |
CVE-2017-13256 | High | 8.8 | 2018-04-04 | In process_service_search_attr_req of sdp_server.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution wi… |
CVE-2017-13255 | High | 8.8 | 2018-04-04 | In process_service_attr_req of sdp_server.c, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no ad… |
CVE-2017-13254 | High | 7.5 | 2018-04-04 | A other vulnerability in the Android media framework (AACExtractor). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-7023950… |
CVE-2017-13253 | High | 7.8 | 2018-04-04 | In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2017-13252 | High | 7.8 | 2018-04-04 | In CryptoHal::decrypt of CryptoHal.cpp, there is an out of bounds write due to improper input validation that results in a read from uninitialized memory. This… |
CVE-2017-13251 | High | 7.8 | 2018-04-04 | In impeg2d_dec_pic_data_thread of impeg2d_dec_hdr.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… |
CVE-2017-13250 | High | 7.8 | 2018-04-04 | In ih264d_fmt_conv_420sp_to_420p of ih264d_utils.c, there is an out of bound write due to a missing out of bounds check because of a multiplication error. This… |
CVE-2017-13249 | High | 7.8 | 2018-04-04 | In impeg2d_api_set_display_frame of impeg2d_api_main.c, there is an out of bound write due to a missing bounds check. This could lead to remote code execution… |
CVE-2017-13248 | High | 7.8 | 2018-04-04 | In impeg2_idct_recon_sse42() of impeg2_idct_recon_sse42_intr.c, there is an out of bound write due to a missing bounds check. This could lead to an remote code… |
CVE-2017-13307 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Upstream kernel pci sysfs. Product: Android. Versions: Android kernel. Android ID: A-69128924. |
CVE-2017-13306 | High | 7.3 | 2018-04-04 | A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063. |
CVE-2017-13305 | High | 7.1 | 2018-04-04 | A information disclosure vulnerability in the Upstream kernel encrypted-keys. Product: Android. Versions: Android kernel. Android ID: A-70526974. |
CVE-2017-13304 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Upstream kernel mnh_sm driver. Product: Android. Versions: Android kernel. Android ID: A-70576999. |
CVE-2017-13303 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Broadcom bcmdhd driver. Product: Android. Versions: Android kernel. Android ID: A-71359108. References: B-V201801… |
CVE-2017-13302 | High | 7.5 | 2018-04-04 | A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-69969749. |
CVE-2017-13301 | High | 7.5 | 2018-04-04 | A denial of service vulnerability in the Android system (system ui). Product: Android. Versions: 8.0. Android ID: A-66498711. |
CVE-2017-13300 | High | 7.5 | 2018-04-04 | A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394. |
CVE-2017-13299 | High | 7.5 | 2018-04-04 | A other vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-70897394. |
CVE-2017-13298 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libhavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13297 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android I… |
CVE-2017-13296 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID… |
CVE-2017-13295 | Medium | 5.3 | 2018-04-04 | A denial of service vulnerability in the Android framework (package installer). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID… |
CVE-2017-13294 | Medium | 5.3 | 2018-04-04 | A information disclosure vulnerability in the Android framework (aosp email application). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1… |
CVE-2017-13293 | High | 7.8 | 2018-04-04 | In the nfc_hci_cmd_received() function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of… |
CVE-2017-13292 | Critical | 9.8 | 2018-04-04 | In wl_get_assoc_ies of wl_cfg80211.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with n… |
CVE-2017-13291 | High | 7.5 | 2018-04-04 | In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a possible NULL pointer dereference due to missing bounds checks. This could lead to remote denial of… |
CVE-2017-13290 | Medium | 6.2 | 2018-04-04 | In sdp_server_handle_client_req of sdp_server.cc, there is an out of bounds read due to a missing bounds check. This could lead to local information disclosure… |