CVE-2017-20025

A vulnerability was found in Solare Solar-Log 2.8.4-56/3.5.2-85. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Flash Memory. The manipulation leads to privilege escalation. The attack can be launched remotely. Upgrading to version...

CVE-2017-20184

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Carlo Gavazzi Powersoft up to version 2.1.1.1 allows an unauthenticated, remote attacker to download any file from the affected device...

CVE-2017-20104

A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Cookie Handler. The manipulation of the argument UWASID leads to sql injection Time. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2017-20192

The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'afterhtml' in versions before 2.05.03 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

CVE-2017-20127

A vulnerability was found in KB Login Authentication Script 1.1 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument username/password with the input 'or''=' leads to sql injection. The attack may be launched remotely. The exploit has...

CVE-2017-20039

A vulnerability was found in SICUNET Access Controller 0.32-05z. It has been classified as very critical. This affects an unknown part. The manipulation leads to weak authentication. It is possible to initiate the attack remotely...

K000149640: Multiple Perl vulnerabilities

Security Advisory Description CVE-2023-31486 HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2020-12723 regcomp.c in Perl before 5.30.3 allows a buffer overflow...

CVE-2017-0174

creationtimestamp| type| source ---|---|--- 2025-01-29 16:22:06+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgveuxgtzn2g...

CERTFR-2017-ALE-002

creationtimestamp| type| source ---|---|--- 2025-01-29 16:20:13+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgverlo5rc24...

CVE-2017-13317

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2017-13318

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2017-13318

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2017-13318

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2017-13317

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

Advisory ROSA-SA-2025-2618

software: libid3tag 0.15.1b WASP: ROSA-CHROME packageevrstring: libid3tag-0.15.1b-24 CVE-ID: CVE-2017-11550 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in libid3tag allows remote attackers to cause a denial of service via a special mp3 file. CVE-STATUS: The vulnerability has been...

CVE-2017-20196

A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2017-20196

creationtimestamp| type| source ---|---|--- 2025-01-26 18:09:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113895996203352073 2025-01-26 18:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnztayn7h2b 2025-01-26 19:07:25+00:00|...

CVE-2017-20196 Itechscripts School Management Software notice-edit.php sql injection

A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...

CVE-2017-20196

CVE-2017-20196 affects Itechscripts School Management Software version 2.75. The vulnerability resides in /notice-edit.php, where manipulating the aid parameter leads to SQL injection. Exploitation is possible remotely, and public exploit details exist (e.g., Exploit-DB). Multiple connected sourc...

CVE-2017-13322

creationtimestamp| type| source ---|---|--- 2025-01-17 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwfcys262t 2025-01-17 23:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxxxs2u532e 2025-01-17 23:57:23+00:00| seen|...