63740 matches found
CVE-2017-18689
An issue was discovered on Samsung mobile devices with M6.0 and N7.0 Exynos5433, Exynos7420, or Exynos7870 chipsets software. An attacker can bypass a ko aka Kernel Module signature by modifying the count of kernel modules. The Samsung ID is SVE-2016-7466 January 2017...
CVE-2017-18870
An issue was discovered in Mattermost Server before 4.5.0, 4.4.5, and 4.3.4. It mishandled webhook access control in the EnableOnlyAdminIntegrations case...
CVE-2017-18636
CDG through 2017-01-01 allows downloadDocument.jsp?command=download= directory traversal...
CVE-2017-18492
The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues...
CVE-2017-18375
Ampache 3.8.3 allows PHP Object Instantiation via democratic.ajax.php and democratic.class.php...
CVE-2017-18456
cPanel before 62.0.17 allows self XSS in the WHM cPAddons showsecurity interface SEC-217...
CVE-2017-18177
Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1...
CVE-2017-18582
The time-sheets plugin before 1.5.2 for WordPress has multiple XSS issues...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2017-18465
cPanel before 62.0.17 does not have a sufficient list of reserved usernames SEC-227...
CVE-2017-18663
An issue was discovered on Samsung mobile devices with N7.x software. Because of missing Intent exception handling, systemserver can have a NullPointerException with a crash of a system process. The Samsung IDs are SVE-2017-9122, SVE-2017-9123, SVE-2017-9124, and SVE-2017-9126 July 2017...
CVE-2017-18681
An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 Qualcomm AP chipsets. There are multiple buffer overflows in the bootloader. The Samsung ID is SVE-2016-7930 March 2017...
CVE-2017-18924
oauth2-server aka node-oauth2-server through 3.1.1 implements OAuth 2.0 without PKCE. It does not prevent authorization code injection. This is similar to CVE-2020-7692. NOTE: the vendor states 'As RFC7636 is an extension, I think the claim in the Readme of "RFC 6749 compliant" is valid and not...
CVE-2017-18564
The sender plugin before 1.2.1 for WordPress has multiple XSS issues...
CVE-2017-18645
An issue was discovered on Samsung mobile devices with M6.x and N7.x Qualcomm chipsets software. There is a panellpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 December 2017...
CVE-2017-18546
The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF...
CVE-2017-18483
ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...
CVE-2017-18522
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...
CVE-2017-18889
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API...