CVEs published August 18, 2017
176 CVEs were published on August 18, 2017: 0 critical, 1 high.
- Published
- 176
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 175
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- All Qualcomm products
- 79
- Qualcomm Snapdragon Mobile, Snapdragon Wear
- 12
- Qualcomm Snapdragon Mobile
- 7
- Agency for Natural Resources and Energy of Ministry of Econ…
- 4
- org.springframework.batch:spring-batch-admin-manager
- 2
- aodh
- 1
- attic
- 1
- BUFFALO WCR-1166DS
- 1
- django-cms
- 1
- Elastic X-Pack Reporting · org.elasticsearch.plugin:x-pack
- 1
High 1
Medium, low and unrated 175
- CVE-2017-12955There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26.
- CVE-2017-12956There is an illegal address access in Exiv2::FileIo::path[abi:cxx11]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote den
- CVE-2017-12957There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp.
- CVE-2017-12958There is an illegal address access in the function output_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will
- CVE-2017-12959There is a reachable assertion abort in the function dict_add_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 t
- CVE-2017-12960There is a reachable assertion abort in the function dict_rename_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1
- CVE-2017-12961There is an assertion abort in the function parse_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 tha
- CVE-2017-12962There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, l
- CVE-2017-12963There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack.
- CVE-2017-12964There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp.
- CVE-2007-5199A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
- CVE-2007-5341Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.
- CVE-2017-8445An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1.Elastic X-Pack Security
- CVE-2017-8446The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonaElastic X-Pack Reporting · org.elasticsearch.plugin:x-pack
- CVE-2017-11160Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to exec
- CVE-2017-3756A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17.Lenovo Group ThinkPad Active Protection System
- CVE-2017-7364In all Qualcomm products with Android releases from CAF using the Linux kernel, in function __mdss_fb_copy_destscaler_data(), variable ds_daAll Qualcomm products
- CVE-2017-9678In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur dAll Qualcomm products
- CVE-2017-9679In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory All Qualcomm products
- CVE-2017-9680In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a drAll Qualcomm products
- CVE-2017-9682In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a All Qualcomm products
- CVE-2017-9684In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After FreAll Qualcomm products
- CVE-2017-9685In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After FrAll Qualcomm products
- CVE-2014-3451OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks.
- CVE-2014-9411In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially posAll Qualcomm products
- CVE-2014-9968In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interfAll Qualcomm products
- CVE-2014-9969In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm.All Qualcomm products
- CVE-2014-9971In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert Qualcomm Snapdragon Mobile
- CVE-2014-9972In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer derefQualcomm Snapdragon Mobile
- CVE-2014-9973In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRMAll Qualcomm products
- CVE-2014-9974In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster.All Qualcomm products
- CVE-2014-9975In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk EncAll Qualcomm products
- CVE-2014-9976In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processingQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2014-9977In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM.All Qualcomm products
- CVE-2014-9978In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service.All Qualcomm products
- CVE-2014-9979In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call potenAll Qualcomm products
- CVE-2014-9980In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading toAll Qualcomm products
- CVE-2014-9981In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient duriQualcomm Snapdragon Mobile
- CVE-2015-0574In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient.Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2015-0575In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configuraAll Qualcomm products
- CVE-2015-0576In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA.Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2015-2675The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest_proxy_call_get_url function, which
- CVE-2015-4071The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the ta
- CVE-2015-4464Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application s
- CVE-2015-5057Cross-site scripting (XSS) vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed.
- CVE-2015-5081Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privildjango-cms
- CVE-2015-5153Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted objec
- CVE-2015-8592In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced potenAll Qualcomm products
- CVE-2015-8593In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processingQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2015-8594In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x.Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2015-8595In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital televisioAll Qualcomm products
- CVE-2015-8596In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protectioAll Qualcomm products
- CVE-2015-9034In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a All Qualcomm products
- CVE-2015-9035In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer needAll Qualcomm products
- CVE-2015-9036In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resultiAll Qualcomm products
- CVE-2015-9037In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlinkAll Qualcomm products
- CVE-2015-9038In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end.All Qualcomm products
- CVE-2015-9039In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be reAll Qualcomm products
- CVE-2015-9040In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a GERAN API.All Qualcomm products
- CVE-2015-9041In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMAAll Qualcomm products
- CVE-2015-9042In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMIAll Qualcomm products
- CVE-2015-9043In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a timeAll Qualcomm products
- CVE-2015-9044In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reacAll Qualcomm products
- CVE-2015-9045In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overflAll Qualcomm products
- CVE-2015-9046In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reacAll Qualcomm products
- CVE-2015-9047In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after All Qualcomm products
- CVE-2015-9048In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packetsAll Qualcomm products
- CVE-2015-9049In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain responseAll Qualcomm products
- CVE-2015-9050In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access cAll Qualcomm products
- CVE-2015-9051In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reacAll Qualcomm products
- CVE-2015-9052In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reacAll Qualcomm products
- CVE-2015-9053In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of All Qualcomm products
- CVE-2015-9054In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding.All Qualcomm products
- CVE-2015-9055In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory managemenAll Qualcomm products
- CVE-2015-9060In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call.All Qualcomm products
- CVE-2015-9061In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading tAll Qualcomm products
- CVE-2015-9062In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists All Qualcomm products
- CVE-2015-9063In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involvQualcomm Snapdragon Mobile
- CVE-2015-9064In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network rQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2015-9065In all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access StrQualcomm Snapdragon Mobile
- CVE-2015-9066In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT proceQualcomm Snapdragon Mobile
- CVE-2015-9067In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed.All Qualcomm products
- CVE-2015-9068In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated.All Qualcomm products
- CVE-2015-9069In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted.All Qualcomm products
- CVE-2015-9070In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscaAll Qualcomm products
- CVE-2015-9071In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone syscaAll Qualcomm products
- CVE-2015-9072In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syAll Qualcomm products
- CVE-2015-9073In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone syAll Qualcomm products
- CVE-2016-10343In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in All Qualcomm products
- CVE-2016-10344In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially posAll Qualcomm products
- CVE-2016-10346In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor.All Qualcomm products
- CVE-2016-10347In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validatAll Qualcomm products
- CVE-2016-10380In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2016-10381In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2016-10382In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient.All Qualcomm products
- CVE-2016-10383In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI.All Qualcomm products
- CVE-2016-10384In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioctQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2016-10385In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS.Qualcomm Snapdragon Mobile
- CVE-2016-10386In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP.Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2016-10387In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenariQualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2016-10388In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-partAll Qualcomm products
- CVE-2016-10389In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto theAll Qualcomm products
- CVE-2016-10390In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may b
- CVE-2016-10391In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for valAll Qualcomm products
- CVE-2016-10392In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory.Qualcomm Snapdragon Mobile, Snapdragon Wear
- CVE-2016-5871In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists All Qualcomm products
- CVE-2016-5872In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validateAll Qualcomm products
- CVE-2017-12881Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication org.springframework.batch:spring-batch-admin-manager
- CVE-2017-12882Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary Javorg.springframework.batch:spring-batch-admin-manager
- CVE-2017-12946classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, id
- CVE-2017-12947classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id,
- CVE-2017-12948Core\Admin\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH_INFO to wp-admin/admin.php, relate
- CVE-2017-12949lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injectio
- CVE-2017-8253In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid mAll Qualcomm products
- CVE-2017-8254In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checkedAll Qualcomm products
- CVE-2017-8255In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot.All Qualcomm products
- CVE-2017-8256In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends moreAll Qualcomm products
- CVE-2017-8257In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde_rotator debug interface for register All Qualcomm products
- CVE-2017-8260In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validatiAll Qualcomm products
- CVE-2017-8261In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentiallyAll Qualcomm products
- CVE-2017-8262In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race conditiAll Qualcomm products
- CVE-2017-8263In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a All Qualcomm products
- CVE-2017-8265In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to All Qualcomm products
- CVE-2017-8266In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadinAll Qualcomm products
- CVE-2017-8267In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially leadAll Qualcomm products
- CVE-2017-8268In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command buAll Qualcomm products
- CVE-2017-8270In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to aAll Qualcomm products
- CVE-2017-8272In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properlyAll Qualcomm products
- CVE-2015-7944The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.
- CVE-2015-7945The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.
- CVE-2017-0687A denial of service vulnerability in the Android media framework (libavc).
- CVE-2017-11652Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges vi
- CVE-2017-11653Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Tr
- CVE-2017-12420Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authentic
- CVE-2017-12589ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack.
- CVE-2017-12591ASUS DSL-N10S V2.1.16_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter.
- CVE-2017-12592ASUS DSL-N10S V2.1.16_APAC devices have a privilege escalation vulnerability.
- CVE-2017-12593ASUS DSL-N10S V2.1.16_APAC devices allow CSRF.
- CVE-2017-12776SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport param
- CVE-2015-1817Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1.0 through 1.1.7 allo
- CVE-2015-1878Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign ar
- CVE-2015-3649The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" folloopen-uri-cached
- CVE-2015-4082attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the eattic
- CVE-2017-12582Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601.
- CVE-2017-12680Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.
- CVE-2017-12859NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspe
- CVE-2017-9767Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web sc
- CVE-2017-9816Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary we
- CVE-2017-12943D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute
- CVE-2017-12944The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attacker
- CVE-2017-1338IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational DOORS Next Generation
- CVE-2017-1501IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the wIBM WebSphere Application Server
- CVE-2017-10665Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd.
- CVE-2017-12440Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verifaodh
- CVE-2017-12940libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
- CVE-2017-12941libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
- CVE-2017-12942libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
- CVE-2017-7278Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors.
- CVE-2017-9454Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to caus
- CVE-2017-10811Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors.BUFFALO WCR-1166DS
- CVE-2017-10821Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September Agency for Natural Resources and Energy of Ministry of Econ…
- CVE-2017-10822Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 SeptemAgency for Natural Resources and Energy of Ministry of Econ…
- CVE-2017-10823Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) DistribAgency for Natural Resources and Energy of Ministry of Econ…
- CVE-2017-10824Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 2017 allows an attackeTeikoku Databank TDB CA TypeA use software
- CVE-2017-12938UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the .
- CVE-2017-12939A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.
- CVE-2017-2228Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL iAgency for Natural Resources and Energy of Ministry of Econ…
- CVE-2017-2289Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain priviKDDI Installer of Qua station connection tool for Windows
- CVE-2017-12935The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the Set
- CVE-2017-12936The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting.
- CVE-2017-12937The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.
- CVE-2017-12932ext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing u
- CVE-2017-12933The finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is pro
- CVE-2017-12934ext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing unt
- CVE-2017-12927A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php.