2017 CVEs (page 65)
Page 65 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-15804 | Critical | 9.8 | 2017-10-22 | The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27 contains a buffer overflow during unescaping of user names with the ~ operato… |
CVE-2017-15789 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mod… |
CVE-2017-15788 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mod… |
CVE-2017-15787 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Exe… |
CVE-2017-15786 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15785 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Data Exe… |
CVE-2017-15784 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to an "Illegal… |
CVE-2017-15783 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15782 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mod… |
CVE-2017-15781 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "Read Acc… |
CVE-2017-15780 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15779 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from… |
CVE-2017-15778 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15777 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to a "User Mod… |
CVE-2017-15776 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15775 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15774 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, related to "Data from… |
CVE-2017-15773 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15772 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dwg file, relate… |
CVE-2017-15769 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dds file, related to "Read Access… |
CVE-2017-15768 | High | 7.8 | 2017-10-22 | IrfanView version 4.50 - 64bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif file, related to "Dat… |
CVE-2017-15767 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15766 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15765 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15764 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15763 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15762 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15761 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15760 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15759 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15758 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15757 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15756 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15755 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15754 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15753 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15752 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15751 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15750 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with BabaCAD4Image plugin version 1.3 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15749 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15748 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15747 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15746 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15745 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15744 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15743 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15742 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15741 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15740 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15739 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to execute arbitrary code or cause a denial of service via a crafted .dwg file, r… |
CVE-2017-15738 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15737 | High | 7.8 | 2017-10-22 | IrfanView 4.50 - 64bit with CADImage plugin version 12.0.0.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a craf… |
CVE-2017-15723 | High | 7.5 | 2017-10-22 | In Irssi before 1.0.5, overlong nicks or targets may result in a NULL pointer dereference while splitting the message. |
CVE-2017-15722 | Medium | 5.9 | 2017-10-22 | In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string. |
CVE-2017-15721 | High | 7.5 | 2017-10-22 | In Irssi before 1.0.5, certain incorrectly formatted DCC CTCP messages could cause a NULL pointer dereference. This is a separate, but similar, issue relative… |
CVE-2017-15228 | High | 7.5 | 2017-10-22 | Irssi before 1.0.5, when installing themes with unterminated colour formatting sequences, may access data beyond the end of the string. |
CVE-2017-15227 | High | 7.5 | 2017-10-22 | Irssi before 1.0.5, while waiting for the channel synchronisation, may incorrectly fail to remove destroyed channels from the query list, resulting in use-afte… |
CVE-2017-15803 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is… |
CVE-2017-15802 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is… |
CVE-2017-15801 | High | 7.8 | 2017-10-22 | XnView Classic for Windows Version 2.43 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .dll file that is… |
CVE-2017-11292 | High | 8.8 | 2017-10-22 | Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculati… |
CVE-2017-15736 | Medium | 6.1 | 2017-10-22 | Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as… |
CVE-2017-15735 | High | 8.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary. |
CVE-2017-15734 | High | 8.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php. |
CVE-2017-15733 | High | 8.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php. |
CVE-2017-15732 | High | 8.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php. |
CVE-2017-15731 | High | 8.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php. |
CVE-2017-15730 | High | 8.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php. |
CVE-2017-15729 | High | 8.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary. |
CVE-2017-15728 | Medium | 4.8 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords. |
CVE-2017-15727 | Medium | 5.4 | 2017-10-22 | In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment. |
CVE-2017-12317 | Medium | 6.7 | 2017-10-22 | The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local application software. The vuln… |
CVE-2017-13127 | High | 8.1 | 2017-10-20 | The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users via a rogue access p… |
CVE-2017-15671 | Medium | 5.9 | 2017-10-20 | The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocated memory when proce… |
CVE-2017-15670 | Critical | 9.8 | 2017-10-20 | The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function in glob.c, related… |
CVE-2017-15291 | Medium | 6.1 | 2017-10-20 | Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to inject arbitrary w… |
CVE-2017-6165 | Critical | 9.8 | 2017-10-20 | In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 11.6.1 HF1, and 12.0… |
CVE-2017-6145 | High | 7.3 | 2017-10-20 | iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 includes a service to co… |
CVE-2017-6144 | High | 7.4 | 2017-10-20 | In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is not verified. Attac… |
CVE-2017-6141 | Medium | 5.9 | 2017-10-20 | In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake when using a clien… |
CVE-2017-12628 | High | 7.8 | 2017-10-20 | The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbi… |
CVE-2017-14937 | Medium | 4.7 | 2017-10-20 | The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus (or the OBD connecto… |
CVE-2017-2133 | High | 8.8 | 2017-10-20 | SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attackers to execute arbi… |
CVE-2017-2132 | High | 7.5 | 2017-10-20 | Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary files in a specific directory via unspe… |
CVE-2017-2131 | Medium | 5.3 | 2017-10-20 | Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access restrictions to view the configuration men… |
CVE-2017-15651 | Medium | 6.7 | 2017-10-20 | PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of… |
CVE-2017-15650 | High | 7.5 | 2017-10-19 | musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict the number of addre… |
CVE-2017-14019 | Medium | 6.7 | 2017-10-19 | An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An unquoted search path or element vulnerability has bee… |
CVE-2017-14017 | High | 7.8 | 2017-10-19 | An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. An uncontrolled search path element vulnerability has b… |
CVE-2017-15649 | High | 7.8 | 2017-10-19 | net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fano… |
CVE-2017-15648 | Medium | 6.1 | 2017-10-19 | In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter. |
CVE-2017-15647 | High | 7.5 | 2017-10-19 | On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. |
CVE-2017-15646 | Medium | 6.1 | 2017-10-19 | Webmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager' menu, there is a 'Download from remote URL' option to downloa… |
CVE-2017-15645 | High | 8.8 | 2017-10-19 | CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker to execute arbitrary commands. |
CVE-2017-15644 | High | 8.6 | 2017-10-19 | SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000. |
CVE-2017-15643 | High | 7.4 | 2017-10-19 | An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IKARUS AV for Windows uses cleartext HTTP… |
CVE-2017-10933 | High | 7.5 | 2017-10-19 | All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerability that allows… |
CVE-2017-5636 | Critical | 9.8 | 2017-10-19 | In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack w… |
CVE-2017-5635 | High | 7.5 | 2017-10-19 | In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the originating node ide… |
CVE-2017-15642 | Medium | 5.5 | 2017-10-19 | In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file. |