2017 CVEs (page 76)
Page 76 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-14652 | Critical | 9.8 | 2017-09-21 | SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote attacker to inject ar… |
CVE-2017-14651 | Medium | 4.8 | 2017-09-21 | WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. |
CVE-2017-14650 | High | 8.1 | 2017-09-21 | A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "convert" utility. It's… |
CVE-2017-14649 | Medium | 5.5 | 2017-09-21 | ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assertion failure in magi… |
CVE-2017-14648 | Critical | 9.8 | 2017-09-21 | A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2. The vulnerability causes an out-of-bounds write, w… |
CVE-2017-14647 | High | 8.8 | 2017-09-21 | A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. The vulnerability causes an ou… |
CVE-2017-14646 | High | 7.5 | 2017-09-21 | The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer over-read and applica… |
CVE-2017-14645 | Medium | 6.5 | 2017-09-21 | A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. The vulnerability causes an ap… |
CVE-2017-14644 | High | 8.8 | 2017-09-21 | A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The vulnerability causes an out-of-bounds write, which leads to remo… |
CVE-2017-14643 | Medium | 6.5 | 2017-09-21 | The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based buffer over-read and… |
CVE-2017-14642 | Medium | 6.5 | 2017-09-21 | A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617. The vulnerability causes a segmentation fault and application… |
CVE-2017-14641 | Medium | 6.5 | 2017-09-21 | A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. The vulnerability causes a segment… |
CVE-2017-14640 | Medium | 6.5 | 2017-09-21 | A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. The vulnerability cause… |
CVE-2017-14639 | High | 8.8 | 2017-09-21 | AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-based buffer underfl… |
CVE-2017-14638 | Medium | 6.5 | 2017-09-21 | AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL pointer dereference, se… |
CVE-2017-14321 | Medium | 5.4 | 2017-09-21 | Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attackers to inject arbit… |
CVE-2017-14320 | High | 8.0 | 2017-09-21 | Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files. |
CVE-2017-12930 | Critical | 9.8 | 2017-09-21 | SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as adminis… |
CVE-2017-12929 | High | 8.8 | 2017-09-21 | Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Re… |
CVE-2017-12928 | Critical | 9.8 | 2017-09-21 | A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to log in via SSH and… |
CVE-2017-9725 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, allocation size gets tru… |
CVE-2017-9724 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel memory, specificall… |
CVE-2017-9720 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bounds read/write can… |
CVE-2017-9677 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_length" could be acce… |
CVE-2017-9676 | Medium | 4.7 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can occur when accessing… |
CVE-2017-8281 | Medium | 4.7 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory while querying event… |
CVE-2017-8280 | High | 7.0 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some p… |
CVE-2017-8278 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffer overflow or integ… |
CVE-2017-8277 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client, if the client registers failed, it wou… |
CVE-2017-8251 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_update_cgc_override… |
CVE-2017-8250 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and "nr_bos" number are passed across funct… |
CVE-2017-8247 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the device ma… |
CVE-2017-12153 | Medium | 4.4 | 2017-09-21 | A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. This function does not ch… |
CVE-2017-11041 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potentially freed in anot… |
CVE-2017-11040 | Medium | 5.5 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information than it is allowed… |
CVE-2017-11002 | Medium | 5.5 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read can occur. |
CVE-2017-11001 | Medium | 5.5 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause out of bounds read. |
CVE-2017-11000 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds check may potentia… |
CVE-2017-10999 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in ipa wan driver may l… |
CVE-2017-10998 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is user input, ends up… |
CVE-2017-10997 | High | 7.8 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause corruption of kernel… |
CVE-2017-10996 | Medium | 5.5 | 2017-09-21 | In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_hwcap_str[] not bei… |
CVE-2017-14160 | High | 8.8 | 2017-09-21 | The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds access and applicatio… |
CVE-2017-14635 | High | 8.8 | 2017-09-21 | In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage statistics-write pe… |
CVE-2017-14246 | High | 8.1 | 2017-09-21 | An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to misha… |
CVE-2017-14245 | High | 8.1 | 2017-09-21 | An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosure, related to misha… |
CVE-2017-14634 | Medium | 6.5 | 2017-09-21 | In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a crafted audio file. |
CVE-2017-14633 | Medium | 6.5 | 2017-09-21 | In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may lead to DoS when oper… |
CVE-2017-14632 | Critical | 9.8 | 2017-09-21 | Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.c when vi->channels… |
CVE-2017-14631 | Critical | 9.8 | 2017-09-21 | In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow. |
CVE-2017-14630 | Critical | 9.8 | 2017-09-21 | In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation. |
CVE-2017-14629 | High | 7.5 | 2017-09-21 | In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-bounds array element. |
CVE-2017-14628 | Critical | 9.8 | 2017-09-21 | In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp. |
CVE-2017-6720 | Medium | 6.5 | 2017-09-21 | A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a… |
CVE-2017-14626 | Critical | 9.8 | 2017-09-21 | ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c. |
CVE-2017-14625 | Critical | 9.8 | 2017-09-21 | ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c. |
CVE-2017-14624 | Critical | 9.8 | 2017-09-21 | ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c. |
CVE-2017-12255 | Medium | 6.7 | 2017-09-21 | A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. The vulnerability is due to insuffi… |
CVE-2017-12254 | Medium | 6.1 | 2017-09-21 | A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Document Object Model (D… |
CVE-2017-12253 | High | 8.8 | 2017-09-21 | A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due… |
CVE-2017-12252 | High | 7.8 | 2017-09-21 | A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attack, potentially caus… |
CVE-2017-12250 | Medium | 5.3 | 2017-09-21 | A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause an HTTP Appl… |
CVE-2017-12248 | Medium | 6.1 | 2017-09-21 | A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site… |
CVE-2017-12219 | High | 7.5 | 2017-09-21 | A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauthenticated, remote… |
CVE-2017-12215 | High | 7.1 | 2017-09-21 | A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unauthenticated, remote… |
CVE-2017-12214 | High | 8.8 | 2017-09-21 | A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Customer Voice Portal… |
CVE-2017-14623 | High | 8.1 | 2017-09-20 | In the ldap.v2 (aka go-ldap) package through 2.5.0 for Go, an attacker may be able to login with an empty password. This issue affects an application using thi… |
CVE-2017-14621 | Medium | 5.4 | 2017-09-20 | Portus 2.2.0 has XSS via the Team field, related to typeahead. |
CVE-2017-14619 | Medium | 6.1 | 2017-09-20 | Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" f… |
CVE-2017-14618 | Medium | 4.8 | 2017-09-20 | Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the Qu… |
CVE-2017-14617 | High | 7.8 | 2017-09-20 | In Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which may lead to a potential attack when handling malicious PDF fi… |
CVE-2017-14616 | High | 7.5 | 2017-09-20 | An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empt… |
CVE-2017-14615 | Medium | 6.1 | 2017-09-20 | An FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if Jav… |
CVE-2017-14610 | High | 7.8 | 2017-09-20 | bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might… |
CVE-2017-14609 | High | 7.8 | 2017-09-20 | The server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitra… |
CVE-2017-14596 | Critical | 9.8 | 2017-09-20 | In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a disclosure of a username and password. |
CVE-2017-14595 | Low | 3.7 | 2017-09-20 | In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state. |
CVE-2017-9804 | High | 7.5 | 2017-09-20 | In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12, if an application allows entering a URL in a form field and built-in URLValidator is used, it is… |
CVE-2017-9793 | High | 7.5 | 2017-09-20 | The REST Plugin in Apache Struts 2.1.x, 2.3.7 through 2.3.33 and 2.5 through 2.5.12 is using an outdated XStream library which is vulnerable and allow perform… |
CVE-2017-14608 | Critical | 9.1 | 2017-09-20 | In LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been reported in dcraw/dcraw.c and internal/dcraw_common.cpp. An attac… |
CVE-2017-14607 | High | 8.1 | 2017-09-20 | In ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported in coders/tiff.c. An attacker could possibly exploit this fla… |
CVE-2017-12611 | Critical | 9.8 | 2017-09-20 | In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a… |
CVE-2017-9649 | Medium | 5.0 | 2017-09-20 | A Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and vari… |
CVE-2017-9645 | Medium | 6.5 | 2017-09-20 | An Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000 Transmitter Module, iPam Transmitter f/DMC 2000, RDS-31 iTX and variants… |
CVE-2017-9607 | High | 7.0 | 2017-09-20 | The BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write arbitrary data to secure memory, bypass the bl1_plat_mem_check… |
CVE-2017-7924 | High | 7.5 | 2017-09-20 | An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-L16AWA, 1763-L16BBB, and 1763-L16DWD. A… |
CVE-2017-14339 | High | 7.5 | 2017-09-20 | The DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer loops, and thus it is possible to force it to enter an infinit… |
CVE-2017-8772 | Critical | 9.8 | 2017-09-20 | On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root… |
CVE-2017-8771 | Critical | 9.8 | 2017-09-20 | On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root… |
CVE-2017-8770 | High | 7.5 | 2017-09-20 | There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage… |
CVE-2017-14604 | Medium | 6.5 | 2017-09-20 | GNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file extension, as demonstrated by an attack in which a .desktop file… |
CVE-2017-12168 | Medium | 6.0 | 2017-09-20 | The access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11 allows privileged KVM guest OS users to cause a denial of service… |
CVE-2017-12883 | Critical | 9.1 | 2017-09-19 | Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensi… |
CVE-2017-12837 | High | 7.5 | 2017-09-19 | Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a d… |
CVE-2017-6315 | Critical | 9.8 | 2017-09-19 | Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx. |
CVE-2017-14033 | High | 7.5 | 2017-09-19 | The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a denial of service (… |
CVE-2017-10784 | High | 8.8 | 2017-09-19 | The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal e… |
CVE-2017-14581 | High | 7.5 | 2017-09-19 | The Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to cause a denial of service (service crash) via a crafted reques… |
CVE-2017-14311 | High | 7.8 | 2017-09-19 | The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C402088 IOCTL call. |
CVE-2017-14143 | Critical | 9.8 | 2017-09-19 | The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, which allows remote attackers to bypass a… |