64353 matches found
CVE-2017-13318
In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2017-13318
In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2017-13318
In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2017-13317
In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...
Advisory ROSA-SA-2025-2618
software: libid3tag 0.15.1b WASP: ROSA-CHROME packageevrstring: libid3tag-0.15.1b-24 CVE-ID: CVE-2017-11550 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in libid3tag allows remote attackers to cause a denial of service via a special mp3 file. CVE-STATUS: The vulnerability has been...
CVE-2017-20196
A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2017-20196
creationtimestamp| type| source ---|---|--- 2025-01-26 18:09:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113895996203352073 2025-01-26 18:15:40+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnztayn7h2b 2025-01-26 19:07:25+00:00|...
CVE-2017-20196
CVE-2017-20196 affects Itechscripts School Management Software version 2.75. The vulnerability resides in /notice-edit.php, where manipulating the aid parameter leads to SQL injection. Exploitation is possible remotely, and public exploit details exist (e.g., Exploit-DB). Multiple connected sourc...
CVE-2017-20196 Itechscripts School Management Software notice-edit.php sql injection
A vulnerability was found in Itechscripts School Management Software 2.75. It has been classified as critical. This affects an unknown part of the file /notice-edit.php. The manipulation of the argument aid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
CVE-2017-13322
creationtimestamp| type| source ---|---|--- 2025-01-17 23:15:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwfcys262t 2025-01-17 23:43:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lfxxxs2u532e 2025-01-17 23:57:23+00:00| seen|...
CVE-2017-13322
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-13322
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2017-13322
In endCallForSubscriber of PhoneInterfaceManager.java, there is a possible way to prevent access to emergency services due to a logic error in the code. This could lead to a local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
Security update for the Linux Kernel
The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2017-14051: scsi/qla2xxx: Fix an integer overflow in sysfs code. bsc1056588 CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234853. CVE-2024-53156:...
CVE-2017-5402
creationtimestamp| type| source ---|---|--- 2025-01-16 02:48:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lftbeh5i5n2h...
Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools from Microsoft Corporation USA that includes most of the tools needed throughout the software lifecycle. A security vulnerability exists in Microsoft Visual Studio. An attacker cou...
Advisory ROSA-SA-2025-2553
Software: rsync 3.1.2 OS: rosa-server79 packageevrstring: rsync-3.1.2-12.0.1.res7 CVE-ID: CVE-2017-16548 BDU-ID: 2021-01395 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the receivexattr function in xattrs.c of the Rsync file transfer and synchronization utility is related to the lack of a check f...
CVE-2017-6839 affecting package audiofile 0.3.6-27
CVE-2017-6839 affecting package audiofile 0.3.6-27. No patch is available currently...