63745 matches found
CVE-2018-21084
An issue was discovered on Samsung mobile devices with L5.1, M6.0, and N7.x software. There is a race condition with a resultant read-after-free issue in getkek. The Samsung ID is SVE-2017-11174 February 2018...
CVE-2018-21064
An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is an array overflow in a driver's input booster. The Samsung ID is SVE-2017-11816 August 2018...
CVE-2017-7716
The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...
CVE-2017-12973
Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack...
CVE-2017-17465
K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request...
CVE-2017-8223
On Wireless IP Camera P2P WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av01 or tcp/av00...
CVE-2017-18400
cPanel before 68.0.15 allows local root code execution via cpdavd SEC-333...
CVE-2017-15200
In Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a private project of another user...
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-9069
In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess...
CVE-2017-9067
In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due to insufficient validation of the action parameter to setup/index.php, aka directory traversal...
CVE-2017-8224
Wireless IP Camera P2P WIFICAM devices have a backdoor root account that can be accessed with TELNET...
CVE-2017-1002153
Koji 1.13.0 does not properly validate SCM paths, allowing an attacker to work around blacklisted paths for build submission...
CVE-2017-18634
The newspaper theme before 6.7.2 for WordPress has script injection via tdadsheader to admin-ajax.php...
CVE-2017-5212
Open-Xchange GmbH OX App Suite 7.8.3 is affected by: Incorrect Access Control...
CVE-2017-11097
When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dictlookup function in lib/q.c...
CVE-2017-1000160
EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection...
CVE-2017-15917
In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the server...