2017 CVEs (page 59)
Page 59 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-13784 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13783 | High | 8.8 | 2017-11-13 | An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTu… |
CVE-2017-13782 | Medium | 5.5 | 2017-11-13 | An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows attackers to bypass i… |
CVE-2017-16799 | Medium | 5.4 | 2017-11-12 | In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to admin/moduleinterface.php during additio… |
CVE-2017-16798 | Medium | 5.4 | 2017-11-12 | In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php"… |
CVE-2017-16797 | High | 7.8 | 2017-11-12 | In SWFTools 0.9.2, the png_load function in lib/png.c does not properly validate an alloclen_64 multiplication of width and height values, which allows remote… |
CVE-2017-16796 | High | 7.8 | 2017-11-12 | In SWFTools 0.9.2, the png_load function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of ser… |
CVE-2017-16794 | Medium | 5.5 | 2017-11-12 | The png_load function in lib/png.c in SWFTools 0.9.2 does not properly validate a multiplication of width and bits-per-pixel values, which allows remote attack… |
CVE-2017-16793 | High | 7.8 | 2017-11-12 | The wav_convert2mono function in lib/wav.c in SWFTools 0.9.2 does not properly validate WAV data, which allows remote attackers to cause a denial of service (i… |
CVE-2017-16520 | High | 7.5 | 2017-11-11 | Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners. |
CVE-2017-16785 | Medium | 6.1 | 2017-11-10 | Cacti 1.1.27 has reflected XSS via the PATH_INFO to host.php. |
CVE-2017-16784 | Medium | 6.1 | 2017-11-10 | In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter. |
CVE-2017-16783 | Critical | 9.8 | 2017-11-10 | In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter. |
CVE-2017-16782 | Medium | 6.1 | 2017-11-10 | In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS. |
CVE-2017-16781 | Medium | 5.4 | 2017-11-10 | The installer in MyBB before 1.8.13 has XSS. |
CVE-2017-16780 | Critical | 9.8 | 2017-11-10 | The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration file. |
CVE-2017-16765 | Medium | 6.1 | 2017-11-10 | XSS exists on D-Link DWR-933 1.00(WW)B17 devices via cgi-bin/gui.cgi. |
CVE-2017-16764 | Critical | 9.8 | 2017-11-10 | An exploitable vulnerability exists in the YAML parsing functionality in the read_yaml_file method in io_utils.py in django_make_app 0.1.3. A YAML parser can e… |
CVE-2017-16763 | Critical | 9.8 | 2017-11-10 | An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-specific configuration being loaded from "… |
CVE-2017-16762 | High | 7.5 | 2017-11-10 | Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring. |
CVE-2017-16761 | Medium | 6.1 | 2017-11-10 | An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites. |
CVE-2017-16760 | Medium | 6.1 | 2017-11-10 | Inedo BuildMaster before 5.8.2 has XSS. |
CVE-2017-16521 | Critical | 9.8 | 2017-11-10 | In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used. |
CVE-2017-9758 | High | 7.4 | 2017-11-10 | Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Authorities store, aka "Inaudible Subversio… |
CVE-2017-5201 | Medium | 5.7 | 2017-11-10 | NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluster and tenant information via unspecifie… |
CVE-2017-16754 | Medium | 5.3 | 2017-11-10 | Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php and Provider/EventListenerServiceProvide… |
CVE-2017-16634 | Critical | 9.8 | 2017-11-10 | In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method. |
CVE-2017-16633 | Medium | 4.3 | 2017-11-10 | In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unauthorized users. |
CVE-2017-16568 | Medium | 5.4 | 2017-11-10 | Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality. This vulnerability allows attackers to… |
CVE-2017-16567 | Medium | 5.4 | 2017-11-10 | Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. This vulnerability allows remote attacke… |
CVE-2017-16562 | Critical | 9.8 | 2017-11-10 | The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers to bypass authentication and obtain ad… |
CVE-2017-16249 | High | 7.5 | 2017-11-10 | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST request can cause the server to hang until… |
CVE-2017-15638 | Medium | 6.5 | 2017-11-10 | The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server for Raspberry Pi 12 SP2; before 3.6.31… |
CVE-2017-12969 | High | 8.8 | 2017-11-10 | Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows remote attackers to cause a denial of se… |
CVE-2017-12803 | Medium | 6.5 | 2017-11-10 | The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv… |
CVE-2017-12802 | Medium | 6.5 | 2017-11-10 | The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted… |
CVE-2017-12801 | Medium | 6.5 | 2017-11-10 | The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mk… |
CVE-2017-12800 | Medium | 6.5 | 2017-11-10 | The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference a… |
CVE-2017-12783 | Medium | 6.5 | 2017-11-10 | The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv… |
CVE-2017-12782 | Medium | 6.5 | 2017-11-10 | The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafted mkv file. |
CVE-2017-12781 | Medium | 6.5 | 2017-11-10 | The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (Null pointer dereference and… |
CVE-2017-12780 | Medium | 6.5 | 2017-11-10 | The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (invalid free and application crash)… |
CVE-2017-12779 | Medium | 6.5 | 2017-11-10 | The Node_GetData function in corec/corec/node/node.c in mkvalidator 0.5.1 allows remote attackers to cause a denial of service (Null pointer dereference and ap… |
CVE-2017-11461 | Medium | 4.3 | 2017-11-10 | NetApp OnCommand Unified Manager for 7-mode (core package) versions prior to 5.2.1 are susceptible to a clickjacking or "UI redress attack" which could be used… |
CVE-2017-11309 | Critical | 9.6 | 2017-11-10 | Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long response. |
CVE-2017-16759 | Medium | 5.9 | 2017-11-09 | The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php. |
CVE-2017-16758 | Medium | 4.8 | 2017-11-09 | Cross-site scripting (XSS) vulnerability in admin/partials/uif-access-token-display.php in the Ultimate Instagram Feed plugin before 1.3 for WordPress allows r… |
CVE-2017-16757 | High | 7.8 | 2017-11-09 | Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privileges via a Trojan horse 7za.exe or hola.exe file. |
CVE-2017-16711 | Medium | 5.5 | 2017-11-09 | The swf_DefineLosslessBitsTagToImage function in lib/modules/swfbits.c in SWFTools 0.9.2 mishandles an uncompress failure, which allows remote attackers to cau… |
CVE-2017-16651 | High | 7.8 | 2017-11-09 | Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including c… |
CVE-2017-16674 | High | 8.0 | 2017-11-09 | Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with… |
CVE-2017-16673 | Medium | 5.3 | 2017-11-09 | Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" wi… |
CVE-2017-16672 | Medium | 5.9 | 2017-11-09 | An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A me… |
CVE-2017-16671 | High | 8.8 | 2017-11-09 | A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13… |
CVE-2017-16669 | High | 8.8 | 2017-11-09 | coders/wpg.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have… |
CVE-2017-11512 | High | 7.5 | 2017-11-08 | The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the name parameter for the… |
CVE-2017-11511 | High | 7.5 | 2017-11-08 | The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for… |
CVE-2017-15865 | High | 7.5 | 2017-11-08 | bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitiv… |
CVE-2017-15087 | High | 7.5 | 2017-11-08 | It was discovered that the fix for CVE-2017-12163 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6. |
CVE-2017-15086 | High | 7.4 | 2017-11-08 | It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6. |
CVE-2017-15085 | Medium | 5.9 | 2017-11-08 | It was discovered that the fix for CVE-2017-12150 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6. |
CVE-2017-16667 | High | 7.8 | 2017-11-08 | backintime (aka Back in Time) before 1.1.24 did improper escaping/quoting of file paths used as arguments to the 'notify-send' command, leading to some parts o… |
CVE-2017-16665 | Medium | 6.1 | 2017-11-08 | RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, trigger… |
CVE-2017-9096 | High | 8.8 | 2017-11-08 | The XML parsers in iText before 5.5.12 and 7.x before 7.0.3 do not disable external entities, which might allow remote attackers to conduct XML external entity… |
CVE-2017-14360 | Medium | 5.9 | 2017-11-08 | A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited to allow D… |
CVE-2017-12824 | High | 7.8 | 2017-11-08 | Special crafted InPage document leads to arbitrary code execution in InPage reader. |
CVE-2017-16663 | Medium | 5.5 | 2017-11-08 | In sam2p 0.49.4, there are integer overflows (with resultant heap-based buffer overflows) in input-bmp.ci in the function ReadImage, because "width * height" m… |
CVE-2017-16661 | Medium | 4.9 | 2017-11-08 | Cacti 1.1.27 allows remote authenticated administrators to read arbitrary files by placing the Log Path into a private directory, and then making a clog.php?fi… |
CVE-2017-16660 | High | 7.2 | 2017-11-08 | Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a… |
CVE-2017-16659 | High | 7.8 | 2017-11-08 | The Gentoo mail-filter/assp package 1.9.8.13030 and earlier allows local users to gain privileges by leveraging access to the assp user account to install a Tr… |
CVE-2017-16618 | Critical | 9.8 | 2017-11-08 | An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or lo… |
CVE-2017-16616 | Critical | 9.8 | 2017-11-08 | An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can exe… |
CVE-2017-16615 | Critical | 9.8 | 2017-11-08 | An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YA… |
CVE-2017-16650 | Medium | 6.6 | 2017-11-07 | The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide-by-zero er… |
CVE-2017-16649 | Medium | 6.6 | 2017-11-07 | The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (divide… |
CVE-2017-16648 | Medium | 6.6 | 2017-11-07 | The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (us… |
CVE-2017-16647 | Medium | 6.6 | 2017-11-07 | drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash)… |
CVE-2017-16646 | Medium | 6.6 | 2017-11-07 | drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possi… |
CVE-2017-16645 | Medium | 6.6 | 2017-11-07 | The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (im… |
CVE-2017-16644 | Medium | 6.6 | 2017-11-07 | The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper… |
CVE-2017-16643 | Medium | 6.6 | 2017-11-07 | The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a denial of service (out… |
CVE-2017-16561 | Critical | 9.8 | 2017-11-07 | /view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'friend_index' paramete… |
CVE-2017-16642 | High | 7.5 | 2017-11-07 | In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' direct… |
CVE-2017-16641 | High | 7.2 | 2017-11-07 | lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an action=save reques… |
CVE-2017-2922 | Critical | 9.8 | 2017-11-07 | An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet ca… |
CVE-2017-2921 | Critical | 9.8 | 2017-11-07 | An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket packet ca… |
CVE-2017-2917 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets can caus… |
CVE-2017-2916 | High | 8.8 | 2017-11-07 | An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1. Specially crafted network packets ca… |
CVE-2017-2915 | High | 8.0 | 2017-11-07 | An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1. A specially crafted SSID can cause th… |
CVE-2017-2914 | High | 8.1 | 2017-11-07 | An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A specially crafted token can bypass… |
CVE-2017-2913 | Medium | 5.9 | 2017-11-07 | An exploitable vulnerability exists in the filtering functionality of Circle with Disney. SSL certificates for specific domain names can cause the Bluecoat lib… |
CVE-2017-2912 | Medium | 5.9 | 2017-11-07 | An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain name… |
CVE-2017-2911 | Medium | 5.9 | 2017-11-07 | An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. SSL certificates for specific domain name… |
CVE-2017-2909 | High | 7.5 | 2017-11-07 | An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinit… |
CVE-2017-2898 | High | 7.5 | 2017-11-07 | An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney. Specially crafted network packets… |
CVE-2017-2895 | High | 8.2 | 2017-11-07 | An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE… |
CVE-2017-2894 | Critical | 9.8 | 2017-11-07 | An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE… |
CVE-2017-2893 | High | 7.5 | 2017-11-07 | An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cau… |
CVE-2017-2892 | Critical | 9.8 | 2017-11-07 | An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT packet can… |
CVE-2017-2891 | Critical | 9.8 | 2017-11-07 | An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CGI target c… |