64384 matches found
CVE-2017-14610
bareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for PID file modification before a root scrip...
CVE-2017-1000226
Stop User Enumeration 1.3.8 allows user enumeration via the REST API...
CVE-2017-1000185
In SWFTools, a memcpy buffer overflow was found in gif2swf...
CVE-2017-14035
CrushFTP 8.x before 8.2.0 has a serialization vulnerability...
CVE-2017-9518
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails...
CVE-2018-21090
An issue was discovered on Samsung mobile devices with software through 2017-11-03 S.LSI modem chipsets. The Exynos modem chipset has a baseband buffer overflow. The Samsung ID is SVE-2017-10745 January 2018...
CVE-2017-1000219
npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user...
CVE-2017-18553
The ad-buttons plugin before 2.3.2 for WordPress has XSS...
CVE-2017-17952
PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address...
CVE-2017-15360
PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script...
CVE-2017-14775
Laravel before 5.5.10 mishandles the rememberme token verification process because DatabaseUserProvider does not have constant-time token comparison...
CVE-2017-14680
ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document...
CVE-2017-8854
wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file...
CVE-2017-13906
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A malicious application may be able to elevate privileges...
CVE-2017-9452
Cross-site scripting XSS vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2017-18480
cPanel before 62.0.4 does not enforce account ownership for hasmycnfforcpuser WHM API calls SEC-210...
CVE-2018-21084
An issue was discovered on Samsung mobile devices with L5.1, M6.0, and N7.x software. There is a race condition with a resultant read-after-free issue in getkek. The Samsung ID is SVE-2017-11174 February 2018...
CVE-2018-21064
An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 August 2018...
CVE-2017-7716
The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...