2017 CVEs (page 41)
Page 41 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17942 | High | 8.8 | 2017-12-28 | In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c. |
CVE-2017-17941 | High | 7.2 | 2017-12-28 | PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter. |
CVE-2017-17940 | Medium | 4.8 | 2017-12-28 | PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php. |
CVE-2017-17939 | High | 8.8 | 2017-12-28 | PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. |
CVE-2017-17938 | Medium | 4.8 | 2017-12-28 | PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter. |
CVE-2017-17937 | Medium | 6.1 | 2017-12-28 | Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search. |
CVE-2017-17936 | High | 8.8 | 2017-12-28 | Vanguard Marketplace Digital Products PHP has CSRF via /search. |
CVE-2017-17932 | Critical | 9.8 | 2017-12-28 | A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary c… |
CVE-2017-10910 | Medium | 6.5 | 2017-12-28 | MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition. |
CVE-2017-9608 | Medium | 6.5 | 2017-12-27 | The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted… |
CVE-2017-11698 | High | 7.8 | 2017-12-27 | Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to… |
CVE-2017-11697 | High | 7.8 | 2017-12-27 | The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating poi… |
CVE-2017-11696 | High | 7.8 | 2017-12-27 | Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to h… |
CVE-2017-11695 | High | 7.8 | 2017-12-27 | Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to ha… |
CVE-2017-16768 | Medium | 4.8 | 2017-12-27 | Cross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitr… |
CVE-2017-13056 | High | 7.8 | 2017-12-27 | The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF file. |
CVE-2017-9944 | Critical | 9.8 | 2017-12-27 | A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affec… |
CVE-2017-7163 | High | 7.8 | 2017-12-27 | An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7162 | High | 7.8 | 2017-12-27 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before… |
CVE-2017-7160 | High | 8.8 | 2017-12-27 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTu… |
CVE-2017-7159 | High | 7.8 | 2017-12-27 | An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows attacker… |
CVE-2017-7158 | Medium | 6.5 | 2017-12-27 | An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Screen Sharing Server" component. It allows attack… |
CVE-2017-7157 | High | 8.8 | 2017-12-27 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTu… |
CVE-2017-7156 | High | 8.8 | 2017-12-27 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTu… |
CVE-2017-7155 | High | 7.8 | 2017-12-27 | An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attack… |
CVE-2017-7154 | Medium | 6.6 | 2017-12-27 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue invol… |
CVE-2017-7152 | Medium | 4.3 | 2017-12-27 | An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote att… |
CVE-2017-17935 | High | 7.5 | 2017-12-27 | The File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to ca… |
CVE-2017-17934 | Medium | 6.5 | 2017-12-27 | ImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage… |
CVE-2017-17931 | Critical | 9.8 | 2017-12-27 | PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter. |
CVE-2017-17930 | High | 8.8 | 2017-12-27 | PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel. |
CVE-2017-17929 | Medium | 4.8 | 2017-12-27 | PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter. |
CVE-2017-17928 | Critical | 9.8 | 2017-12-27 | PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter. |
CVE-2017-17927 | Medium | 5.3 | 2017-12-27 | PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category… |
CVE-2017-17926 | Medium | 5.3 | 2017-12-27 | PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoof… |
CVE-2017-17925 | Medium | 4.8 | 2017-12-27 | PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter. |
CVE-2017-17924 | Medium | 5.3 | 2017-12-27 | PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/review_userwise.ph… |
CVE-2017-17915 | High | 8.8 | 2017-12-27 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testin… |
CVE-2017-17914 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (Re… |
CVE-2017-17913 | High | 8.8 | 2017-12-27 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libw… |
CVE-2017-17912 | High | 8.8 | 2017-12-27 | In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data… |
CVE-2017-17911 | Medium | 6.1 | 2017-12-27 | packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503. |
CVE-2017-17909 | Medium | 4.8 | 2017-12-27 | PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter. |
CVE-2017-17908 | High | 8.8 | 2017-12-27 | PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general. |
CVE-2017-17907 | Medium | 6.1 | 2017-12-27 | PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter. |
CVE-2017-17906 | Critical | 9.8 | 2017-12-27 | PHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter. |
CVE-2017-17905 | High | 8.8 | 2017-12-27 | PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php. |
CVE-2017-17904 | Medium | 5.4 | 2017-12-27 | FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile. |
CVE-2017-17903 | High | 8.8 | 2017-12-27 | FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel. |
CVE-2017-17900 | Critical | 9.8 | 2017-12-27 | SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parame… |
CVE-2017-17899 | Critical | 9.8 | 2017-12-27 | SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via… |
CVE-2017-17898 | High | 7.5 | 2017-12-27 | Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information. |
CVE-2017-17897 | Critical | 9.8 | 2017-12-27 | SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parame… |
CVE-2017-17896 | Medium | 6.1 | 2017-12-27 | Readymade Job Site Script has XSS via the keyword parameter to the /job URI. |
CVE-2017-17895 | Critical | 9.8 | 2017-12-27 | Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI. |
CVE-2017-17894 | High | 8.8 | 2017-12-27 | Readymade Job Site Script has CSRF via the /job URI. |
CVE-2017-17893 | Medium | 6.1 | 2017-12-27 | Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname paramet… |
CVE-2017-17892 | Critical | 9.8 | 2017-12-27 | Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter. |
CVE-2017-17891 | High | 8.8 | 2017-12-27 | Readymade Video Sharing Script has CSRF via user-profile-edit.php. |
CVE-2017-17888 | High | 8.8 | 2017-12-27 | cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-D… |
CVE-2017-17887 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a deni… |
CVE-2017-17886 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial… |
CVE-2017-17885 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of… |
CVE-2017-17884 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial o… |
CVE-2017-17883 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of se… |
CVE-2017-17882 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which allows attackers to cause a denial of se… |
CVE-2017-17881 | Medium | 6.5 | 2017-12-27 | In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of se… |
CVE-2017-17880 | High | 8.8 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSIO… |
CVE-2017-17879 | High | 8.8 | 2017-12-27 | In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and cau… |
CVE-2017-17878 | Critical | 9.8 | 2017-12-27 | An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of the default use of DES (aka the CONFIG_… |
CVE-2017-17877 | Critical | 9.8 | 2017-12-27 | An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly available via IPv6 TCP port… |
CVE-2017-17876 | High | 7.5 | 2017-12-27 | Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a user=download request with a pathname in… |
CVE-2017-17875 | Critical | 9.8 | 2017-12-27 | The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action. |
CVE-2017-17874 | High | 8.8 | 2017-12-27 | Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php… |
CVE-2017-17873 | Critical | 9.8 | 2017-12-27 | Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI. |
CVE-2017-17872 | Critical | 9.8 | 2017-12-27 | The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action. |
CVE-2017-17871 | Critical | 9.8 | 2017-12-27 | The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter. |
CVE-2017-17870 | Critical | 9.8 | 2017-12-27 | The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action. |
CVE-2017-17869 | Medium | 6.1 | 2017-12-27 | The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter. |
CVE-2017-17868 | Medium | 6.1 | 2017-12-27 | In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag. |
CVE-2017-17866 | High | 7.8 | 2017-12-27 | pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote a… |
CVE-2017-17864 | Low | 3.3 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, whi… |
CVE-2017-17863 | High | 7.8 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values and the BPF stack, which allows local use… |
CVE-2017-17862 | Medium | 5.5 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be processed by JIT compilers. This behavior, als… |
CVE-2017-17859 | Medium | 6.1 | 2017-12-27 | Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks to obtain sensitive information, via vect… |
CVE-2017-17857 | High | 7.8 | 2017-12-27 | The check_stack_boundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruptio… |
CVE-2017-17856 | High | 7.8 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other… |
CVE-2017-17855 | High | 7.8 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other… |
CVE-2017-17854 | High | 7.8 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (integer overflow and memory corruption) or possibly h… |
CVE-2017-17853 | High | 7.8 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other… |
CVE-2017-17852 | High | 7.8 | 2017-12-27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other… |
CVE-2017-17850 | High | 7.5 | 2017-12-27 | An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP messages create a dia… |
CVE-2017-17849 | Critical | 9.8 | 2017-12-27 | A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a… |
CVE-2017-17848 | High | 7.5 | 2017-12-27 | An issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature spoofing is possible for multipart/related messages because a signe… |
CVE-2017-17847 | High | 7.5 | 2017-12-27 | An issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI does not properly distinguish between an attachment signature… |
CVE-2017-17846 | High | 7.5 | 2017-12-27 | An issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial of Service, because of attempts to match arbitrarily long stri… |
CVE-2017-17845 | High | 7.3 | 2017-12-27 | An issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs because Math.Random() is used by pretty Easy privacy (pEp), aka TBE-… |
CVE-2017-17844 | Medium | 6.5 | 2017-12-27 | An issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content by sending an encrypted data block (that the attacker cannot d… |
CVE-2017-17843 | Medium | 5.9 | 2017-12-27 | An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, because incorrect regula… |
CVE-2017-17840 | High | 7.8 | 2017-12-27 | An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execute code by sending messages… |