2017 CVEs (page 55)
Page 55 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1000191 | High | 7.5 | 2017-11-17 | Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS. |
CVE-2017-16875 | High | 7.5 | 2017-11-17 | An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an a… |
CVE-2017-1000212 | Critical | 9.8 | 2017-11-17 | Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. A malicious website can execute requests against an… |
CVE-2017-1000211 | Medium | 5.3 | 2017-11-17 | Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto… |
CVE-2017-1000206 | Critical | 9.8 | 2017-11-17 | samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary code execution |
CVE-2017-1000203 | High | 8.8 | 2017-11-17 | ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code execution |
CVE-2017-4938 | Medium | 6.5 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of th… |
CVE-2017-4937 | High | 7.8 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser i… |
CVE-2017-4936 | High | 7.8 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser i… |
CVE-2017-4935 | High | 7.8 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser… |
CVE-2017-4934 | High | 8.8 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a gues… |
CVE-2017-4929 | Medium | 6.1 | 2017-11-17 | VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure. |
CVE-2017-4928 | High | 7.5 | 2017-11-17 | The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injectio… |
CVE-2017-4927 | High | 7.5 | 2017-11-17 | VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remot… |
CVE-2017-10890 | Medium | 4.6 | 2017-11-17 | Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior t… |
CVE-2017-10889 | Medium | 4.3 | 2017-11-17 | TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors. |
CVE-2017-10888 | Medium | 5.5 | 2017-11-17 | BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors. |
CVE-2017-10887 | High | 7.8 | 2017-11-17 | Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspeci… |
CVE-2017-10886 | Medium | 5.4 | 2017-11-17 | Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earl… |
CVE-2017-16872 | Critical | 9.8 | 2017-11-17 | An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message (like cseq, ttl, po… |
CVE-2017-16871 | High | 8.1 | 2017-11-17 | The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/plugins/updraftplus/a… |
CVE-2017-16870 | High | 8.1 | 2017-11-17 | The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via an httpget… |
CVE-2017-16869 | High | 7.8 | 2017-11-17 | p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other im… |
CVE-2017-16868 | Medium | 5.5 | 2017-11-17 | In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers t… |
CVE-2017-1000229 | High | 7.8 | 2017-11-17 | Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of service. |
CVE-2017-1000226 | Medium | 5.3 | 2017-11-17 | Stop User Enumeration 1.3.8 allows user enumeration via the REST API |
CVE-2017-1000225 | Medium | 6.1 | 2017-11-17 | Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anything an admin can |
CVE-2017-1000223 | Medium | 5.4 | 2017-11-17 | A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissio… |
CVE-2017-1000164 | Medium | 5.4 | 2017-11-17 | Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation |
CVE-2017-1000160 | Medium | 5.4 | 2017-11-17 | EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection |
CVE-2017-1000158 | Critical | 9.8 | 2017-11-17 | CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer… |
CVE-2017-1000129 | High | 7.5 | 2017-11-17 | Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure |
CVE-2017-1000125 | High | 7.5 | 2017-11-17 | Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell. |
CVE-2017-1000248 | Critical | 9.8 | 2017-11-17 | Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis |
CVE-2017-1000247 | High | 7.5 | 2017-11-17 | British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resul… |
CVE-2017-1000246 | Medium | 5.3 | 2017-11-17 | Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data. |
CVE-2017-1000237 | Critical | 9.8 | 2017-11-17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user'… |
CVE-2017-1000236 | Medium | 6.1 | 2017-11-17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inject malicious client… |
CVE-2017-1000235 | Critical | 9.8 | 2017-11-17 | I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised. |
CVE-2017-1000234 | Medium | 5.3 | 2017-11-17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating directories simply by navig… |
CVE-2017-1000232 | Critical | 9.8 | 2017-11-17 | A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. |
CVE-2017-1000231 | Critical | 9.8 | 2017-11-17 | A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. |
CVE-2017-1000241 | High | 8.1 | 2017-11-17 | The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. This vulnerability can allow an authenti… |
CVE-2017-1000240 | Medium | 5.4 | 2017-11-17 | The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting version 5.0.0 and prior versions. These… |
CVE-2017-1000239 | Medium | 5.4 | 2017-11-17 | InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious client side script w… |
CVE-2017-1000238 | High | 8.8 | 2017-11-17 | InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the webserver. It is pos… |
CVE-2017-1000228 | Critical | 9.8 | 2017-11-17 | nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function |
CVE-2017-1000189 | High | 7.5 | 2017-11-17 | nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile() |
CVE-2017-1000188 | Medium | 6.1 | 2017-11-17 | nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection |
CVE-2017-1000173 | Critical | 9.8 | 2017-11-17 | Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to a buffer, we can break out of the bounds… |
CVE-2017-1000172 | Critical | 9.8 | 2017-11-17 | Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'sublexer' pointer has been freed. Line 542… |
CVE-2017-1000209 | Medium | 5.9 | 2017-11-17 | The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltNam… |
CVE-2017-1000208 | High | 8.8 | 2017-11-17 | A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciously crafted yaml Ope… |
CVE-2017-1000201 | Medium | 5.5 | 2017-11-17 | The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack |
CVE-2017-1000200 | High | 7.5 | 2017-11-17 | tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_handler() function resu… |
CVE-2017-1000199 | High | 7.5 | 2017-11-17 | tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able to check for existe… |
CVE-2017-1000198 | High | 7.5 | 2017-11-17 | tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler resulting in denial of service |
CVE-2017-1000197 | Critical | 9.8 | 2017-11-17 | October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server. |
CVE-2017-1000196 | Critical | 9.8 | 2017-11-17 | October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other applications on th… |
CVE-2017-1000195 | High | 7.5 | 2017-11-17 | October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file permissions on the… |
CVE-2017-1000194 | Critical | 9.8 | 2017-11-17 | October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possibly other applicat… |
CVE-2017-1000193 | Medium | 6.1 | 2017-11-17 | October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim's browser. |
CVE-2017-1000220 | Critical | 9.8 | 2017-11-17 | soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution |
CVE-2017-1000213 | Medium | 4.8 | 2017-11-17 | WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user_search |
CVE-2017-1000210 | Critical | 9.8 | 2017-11-17 | picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack |
CVE-2017-1000187 | High | 7.8 | 2017-11-17 | In SWFTools, an address access exception was found in pdf2swf. FoFiTrueType::writeTTF() |
CVE-2017-1000186 | Medium | 5.5 | 2017-11-17 | In SWFTools, a stack overflow was found in pdf2swf. |
CVE-2017-1000185 | Medium | 5.5 | 2017-11-17 | In SWFTools, a memcpy buffer overflow was found in gif2swf. |
CVE-2017-1000182 | Medium | 5.5 | 2017-11-17 | In SWFTools, a memory leak was found in wav2swf. |
CVE-2017-1000176 | Medium | 5.5 | 2017-11-17 | In SWFTools, a memcpy buffer overflow was found in swfc. |
CVE-2017-1000174 | Medium | 5.5 | 2017-11-17 | In SWFTools, an address access exception was found in swfdump swf_GetBits(). |
CVE-2017-15517 | Medium | 5.5 | 2017-11-17 | AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. All users are urged to move to a fix… |
CVE-2017-1000224 | Medium | 6.5 | 2017-11-17 | CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin |
CVE-2017-1000219 | Critical | 9.8 | 2017-11-17 | npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user |
CVE-2017-1000218 | Critical | 9.8 | 2017-11-17 | LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution. |
CVE-2017-0865 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions: Android kernel. Android ID: A-65025090. References: M-ALPS02973… |
CVE-2017-0864 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). Product: Android. Versions: Android kernel. Android ID: A-37277147. References: M-A… |
CVE-2017-0863 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Upstream kernel video driver. Product: Android. Versions: Android kernel. Android ID: A-37950620. |
CVE-2017-0862 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Upstream kernel kernel. Product: Android. Versions: Android kernel. Android ID: A-36006779. |
CVE-2017-0861 | High | 7.8 | 2017-11-16 | Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors. |
CVE-2017-0860 | Medium | 5.3 | 2017-11-16 | An elevation of privilege vulnerability in the Android system (inputdispatcher). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Andro… |
CVE-2017-0859 | High | 7.5 | 2017-11-16 | Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-36075131. |
CVE-2017-0858 | High | 7.5 | 2017-11-16 | Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894. |
CVE-2017-0857 | High | 7.5 | 2017-11-16 | Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65122447. |
CVE-2017-0854 | Critical | 9.1 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63873837. |
CVE-2017-0853 | Critical | 9.1 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63121644. |
CVE-2017-0852 | High | 7.5 | 2017-11-16 | A denial of service vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506. |
CVE-2017-0851 | Medium | 5.3 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0… |
CVE-2017-0850 | Medium | 5.3 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-64836941. |
CVE-2017-0849 | Medium | 5.3 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-… |
CVE-2017-0848 | Medium | 5.3 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8… |
CVE-2017-0847 | Critical | 9.8 | 2017-11-16 | An elevation of privilege vulnerability in the Android media framework (mediaanalytics). Product: Android. Versions: 8.0. Android ID: A-65540999. |
CVE-2017-0845 | High | 7.5 | 2017-11-16 | A denial of service vulnerability in the Android framework (syncstorageengine). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Androi… |
CVE-2017-0843 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the MediaTek ccci. Product: Android. Versions: Android kernel. Android ID: A-62670819. References: M-ALPS03361488. |
CVE-2017-0842 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-375025… |
CVE-2017-0841 | High | 7.8 | 2017-11-16 | A remote code execution vulnerability in the Android system (libutils). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android I… |
CVE-2017-0840 | High | 7.5 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1… |
CVE-2017-0839 | High | 7.5 | 2017-11-16 | An information disclosure vulnerability in the Android media framework (libeffects). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8… |
CVE-2017-0838 | High | 7.8 | 2017-11-16 | An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-63522818. |
CVE-2017-0836 | High | 7.8 | 2017-11-16 | A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. A… |