81 matches found
SUSE CVE-2017-5597
In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the DHCPv6 dissector could go into a large loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-dhcpv6.c by changing a data type to avoid an integer overflow...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
CNVD-ID CNVD-2017-02474 发布时间 2017-03-07 危害级别 高 AV:N/AC:L/Au:N/C:C/I:C/A:C 影响产品 Apache struts =2.3.5，=2.5， CVE Identifier CVE-2017-5638 Problem It is possible to perform a RCE attack with a malicious Content-Type value. If the Content-Type value isn't valid an exception is thrown which is then use...
CVE-2017-18876
creationtimestamp| type| source ---|---|--- 2020-06-19 20:55:39+00:00| seen| https://t.me/cibsecurity/12904...
DEBIAN-CVE-2017-5332
The extractgroupiconcursorresource in wrestool/extract.c in icoutils before 0.31.1 can access unallocated memory, which allows local users to cause a denial of service process crash and execute arbitrary code via a crafted executable...
CVE-2017-14394
creationtimestamp| type| source ---|---|--- 2019-06-20 02:32:20+00:00| seen| https://t.me/cibsecurity/5033...
Joruri CMS 2017 vulnerable to cross-site scripting
Overview Joruri CMS 2017 provided by SiteBridge Inc. contains a cross-site scripting vulnerability CWE-79. Yuji Tounai of Mercari, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An arbitrary script may...
CVE-2017-6514
creationtimestamp| type| source ---|---|--- 2019-05-22 18:48:11+00:00| seen| https://t.me/cvemitreorg/134 2019-05-22 23:14:09+00:00| seen| https://t.me/cibsecurity/4453...
CVE-2017-16016
creationtimestamp| type| source ---|---|--- 2018-11-09 17:47:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-xc6g-ggrc-qq4r...
CVE-2017-15818
creationtimestamp| type| source ---|---|--- 2018-09-18 22:18:44+00:00| seen| https://t.me/cibsecurity/268...
CVE-2017-4063
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...
tinysvcmdns library DNS Denial of Service Vulnerability
The tinysvcmdns library is a multicast DNS response library for services. A security vulnerability exists in the tinysvcmdns library version 2017-11-05. An attacker can exploit this vulnerability by sending a DNS query to cause a denial of service null pointer backreference and server crash...
DEBIAN-CVE-2017-11697
The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...
Google Android Qualcomm component integer overflow vulnerability (CNVD-2017-36940)
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which Qualcomm WLAN is a wireless LAN component. An integer overflow vulnerability exists in Qualcomm WLAN in Android. A remote attacker could exploit this vulnerability to execute cod...
istockshaker.net XSS vulnerability
Open Bug Bounty ID: OBB-447752 Description| Value ---|--- Affected Website:| istockshaker.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
runnersworld.co.za XSS vulnerability
Open Bug Bounty ID: OBB-444646 Description| Value ---|--- Affected Website:| runnersworld.co.za Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...