2017 CVEs (page 96)
Page 96 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-9489 | High | 8.8 | 2017-07-31 | The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF. |
CVE-2017-9488 | High | 8.8 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devi… |
CVE-2017-9487 | Medium | 5.9 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941_2.5s3_PROD_sey) devi… |
CVE-2017-9486 | High | 7.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to compute password-of-the-… |
CVE-2017-9485 | High | 7.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to write arbitrary data to… |
CVE-2017-9484 | High | 7.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-… |
CVE-2017-9483 | Critical | 9.8 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Linux users to obtain… |
CVE-2017-9482 | Critical | 9.8 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain root access to th… |
CVE-2017-9481 | High | 7.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtain unintended access… |
CVE-2017-9480 | Medium | 5.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows local users (e.g., users who have command ac… |
CVE-2017-9479 | Critical | 9.8 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execute arbitrary comman… |
CVE-2017-9478 | High | 7.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-… |
CVE-2017-9477 | Medium | 6.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P20-18-v303r20421746-… |
CVE-2017-9476 | Medium | 6.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217… |
CVE-2017-9475 | Medium | 5.9 | 2017-07-31 | Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address. |
CVE-2017-11756 | High | 7.0 | 2017-07-30 | In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to… |
CVE-2017-11755 | Medium | 6.5 | 2017-07-30 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that… |
CVE-2017-11754 | Medium | 6.5 | 2017-07-30 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file that… |
CVE-2017-11753 | Medium | 6.5 | 2017-07-30 | The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service (heap-based buffer over-r… |
CVE-2017-11752 | Medium | 6.5 | 2017-07-30 | The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. |
CVE-2017-11751 | Medium | 6.5 | 2017-07-30 | The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via a crafted file. |
CVE-2017-11750 | Medium | 6.5 | 2017-07-30 | The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL pointer dereference)… |
CVE-2017-11692 | High | 7.5 | 2017-07-30 | The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service (assertion failure and ap… |
CVE-2017-11749 | High | 7.8 | 2017-07-30 | InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file. |
CVE-2017-11748 | High | 7.8 | 2017-07-30 | VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or AUDIOSES.dll file. |
CVE-2017-11747 | Medium | 5.5 | 2017-07-30 | main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which might allow local user… |
CVE-2017-11746 | High | 7.5 | 2017-07-30 | Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging… |
CVE-2017-11744 | Medium | 6.1 | 2017-07-30 | In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php… |
CVE-2017-11742 | High | 7.8 | 2017-07-30 | The writeRandomBytes_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain privileges via a Trojan hor… |
CVE-2017-11737 | Medium | 6.1 | 2017-07-29 | interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the history page. |
CVE-2017-11736 | High | 8.8 | 2017-07-29 | SQL injection vulnerability in core\admin\auto-modules\forms\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbitrary SQL commands… |
CVE-2017-11734 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of se… |
CVE-2017-11733 | Medium | 5.5 | 2017-07-29 | A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0.4.8, which allows a… |
CVE-2017-11732 | Medium | 5.5 | 2017-07-29 | A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0.4.8, which allows a… |
CVE-2017-11731 | Medium | 5.5 | 2017-07-29 | An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming 0.4.8, which allows… |
CVE-2017-11730 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1474) in util/decompile.c in Ming 0.4.8, which allows attac… |
CVE-2017-11729 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function OpCode (called from decompileINCR_DECR line 1440) in util/decompile.c in Ming 0.4.8, which allows attac… |
CVE-2017-11728 | Medium | 5.5 | 2017-07-29 | A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which allows attackers to ca… |
CVE-2017-11725 | Medium | 5.4 | 2017-07-29 | The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections. |
CVE-2017-11724 | Medium | 6.5 | 2017-07-29 | The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum_info and clone_info dat… |
CVE-2017-11723 | High | 7.5 | 2017-07-29 | Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to delete any folder via di… |
CVE-2017-4919 | Critical | 9.0 | 2017-07-28 | VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without… |
CVE-2017-6260 | Medium | 6.5 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of string length may lead to… |
CVE-2017-6259 | Medium | 6.1 | 2017-07-28 | NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect detection and recovery from an invalid state produced by… |
CVE-2017-6257 | High | 8.8 | 2017-07-28 | NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to denial of service or potential… |
CVE-2017-6256 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value passed from a user t… |
CVE-2017-6255 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an improper input parameter… |
CVE-2017-6254 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointer passed from an use… |
CVE-2017-6253 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size of an input buffer… |
CVE-2017-6252 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to a denial of service or… |
CVE-2017-6251 | High | 7.8 | 2017-07-28 | NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a missing permissions check may allow users to gain access to… |
CVE-2017-11720 | Critical | 9.8 | 2017-07-28 | There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file. |
CVE-2017-11722 | Medium | 6.5 | 2017-07-28 | The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds read and application… |
CVE-2017-11694 | Critical | 9.1 | 2017-07-28 | MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access. An attacker with knowledge of the hard-coded credentia… |
CVE-2017-11693 | Critical | 9.1 | 2017-07-28 | MEDHOST Document Management System contains hard-coded credentials that are used for customer database access. An attacker with knowledge of the hard-coded cre… |
CVE-2017-11719 | High | 7.8 | 2017-07-28 | The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access… |
CVE-2017-11718 | Medium | 6.1 | 2017-07-28 | There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php. |
CVE-2017-11717 | High | 7.5 | 2017-07-28 | MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements… |
CVE-2017-11716 | Medium | 6.1 | 2017-07-28 | MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode. |
CVE-2017-11715 | Critical | 9.8 | 2017-07-28 | job/uploadfile_save.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticated admins to execut… |
CVE-2017-11714 | High | 7.8 | 2017-07-28 | psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a denial of service (appl… |
CVE-2017-11706 | High | 7.5 | 2017-07-28 | The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leveraging the lack of SSL… |
CVE-2017-11705 | Medium | 6.5 | 2017-07-28 | A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via a craft… |
CVE-2017-11704 | Medium | 6.5 | 2017-07-28 | A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a denial of service via… |
CVE-2017-11703 | Medium | 6.5 | 2017-07-28 | A memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of service via… |
CVE-2017-11647 | Medium | 5.4 | 2017-07-28 | NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating a… |
CVE-2017-11646 | High | 8.8 | 2017-07-28 | NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administ… |
CVE-2017-11645 | Critical | 9.8 | 2017-07-28 | NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or s… |
CVE-2017-11184 | Critical | 9.8 | 2017-07-28 | SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter. |
CVE-2017-11183 | Medium | 4.9 | 2017-07-28 | front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter. |
CVE-2017-8870 | High | 7.8 | 2017-07-27 | Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file. |
CVE-2017-8869 | High | 7.8 | 2017-07-27 | Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file. |
CVE-2017-11665 | High | 7.5 | 2017-07-27 | The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a denial of service (Segmentation Violation an… |
CVE-2017-9614 | High | 8.8 | 2017-07-27 | The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of service (invalid memory access and application… |
CVE-2017-9545 | Medium | 5.5 | 2017-07-27 | The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (buffer over-read) via a crafted mp3 file. |
CVE-2017-9412 | Medium | 5.5 | 2017-07-27 | The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of service (invalid memory read and applicati… |
CVE-2017-9260 | Medium | 5.5 | 2017-07-27 | The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (heap-… |
CVE-2017-9259 | Medium | 5.5 | 2017-07-27 | The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (mem… |
CVE-2017-9258 | Medium | 5.5 | 2017-07-27 | The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers to cause a denial of service (infinite lo… |
CVE-2017-11691 | Medium | 5.4 | 2017-07-27 | Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrary web script or HTML via specially craft… |
CVE-2017-11687 | Medium | 6.1 | 2017-07-27 | Multiple Persistent cross-site scripting (XSS) vulnerabilities in Event log parsing and Display functions in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5… |
CVE-2017-11686 | Medium | 6.1 | 2017-07-27 | Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password via XSS vulnerabilities or sniffing non-S… |
CVE-2017-11685 | Medium | 6.1 | 2017-07-27 | Multiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event data in Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allow… |
CVE-2017-11684 | High | 7.5 | 2017-07-27 | There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of service via crafted i… |
CVE-2017-11683 | Medium | 6.5 | 2017-07-27 | There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 that will lead to a remote denial of servi… |
CVE-2017-11682 | Medium | 6.1 | 2017-07-27 | Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) version, (2) url, or… |
CVE-2017-11681 | High | 8.8 | 2017-07-27 | Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be available for administrati… |
CVE-2017-11680 | High | 8.8 | 2017-07-27 | Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php. |
CVE-2017-11679 | High | 8.8 | 2017-07-27 | Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action. |
CVE-2017-11678 | High | 8.8 | 2017-07-27 | SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter in admin.php. |
CVE-2017-11677 | Medium | 6.1 | 2017-07-27 | Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query string to admin.php. |
CVE-2017-11675 | High | 8.8 | 2017-07-27 | The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authe… |
CVE-2017-11674 | Medium | 5.5 | 2017-07-27 | Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a "Read Access Violati… |
CVE-2017-11673 | Critical | 9.8 | 2017-07-27 | Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed PRE file, related… |
CVE-2017-7659 | High | 7.5 | 2017-07-26 | A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process. |
CVE-2017-11671 | Medium | 4.0 | 2017-07-26 | Under certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler Collection (GCC) version 4.6, 4.7, 4.8, 4.9, 5 before 5.5, and 6 before… |
CVE-2017-11667 | High | 8.1 | 2017-07-26 | OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a h… |
CVE-2017-9835 | High | 7.8 | 2017-07-26 | The gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service (heap-based buffer overflow an… |
CVE-2017-9740 | High | 7.8 | 2017-07-26 | The xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based bu… |
CVE-2017-9739 | High | 7.8 | 2017-07-26 | The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-based buffer over-read… |