CVE-2024-7517

CVE-2024-7517 concerns a local, privileged escalation in Brocade Fabric OS prior to 9.2.0c and in 9.2.1–9.2.1a on IP Extension platforms (7810/7840/7850 or SX-6 blade on X6/X7). Exploitation requires an authenticated user on SSH/serial to craft portcfg usage. Root cause is a command-injection vul...

CVE-2024-7517 Privileged escalation via crafted use of portcfg command

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...

Malicious code in mp3-file-zip-d-ownload-7517-goodbye-yellow-brick-road-h63vl-tpdnhx (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ce58c2ac7b1825c26b2656020f588d8a223c04953287197e776979cc4f4f6ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2017-7517

CVE-2017-7517 describes an input validation issue in Red Hat OpenShift Enterprise where a 1:1 mapping between Hawkular Metrics tenants and OpenShift projects/namespaces allows a user who creates and later deletes a project named X to be able to access the metrics from the original project X when ...

CVE-2017-7517

An input validation vulnerability exists in Openshift Enterprise due to a 1:1 mapping of tenants in Hawkular Metrics and projects/namespaces in OpenShift. If a user creates a project called "MyProject", and then later deletes it another user can then create a project called "MyProject" and access...

CVE-2020-7517

Affected software: Easergy Builder (versions 1.4.7.2 and older). Vulnerability type: CWE-312 Cleartext Storage of Sensitive Information. Root cause / impact: The product stores sensitive information in plaintext, enabling an attacker with local access to read user credentials. The CVE entry expli...

CVE-2018-7517

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

CVE-2018-7517

CVE-2018-7517 relates to Omron CX-Supervisor, where parsing malformed SCS project files can trigger an out-of-bounds write in the file parsing code (affecting CX-Supervisor versions 3.30 and prior; ICS update notes 3.40 and prior). The vulnerability potentially enables remote code execution when ...

CVE-2018-7517

In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerability...

Fedora Update for techne FEDORA-2017-8f27031c8f

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-7517

CVE-2015-7517 affects the WordPress plugin Double Opt-In for Download (public/includes/ files) with SQL injection via the ver parameter in class-doifd-download.php and class-doifd-landing-page.php. Affected versions are prior to 2.0.9. Root cause is improper handling of user-supplied ver data ena...

CVE-2016-7517

The EncodeImage function in coders/pict.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted PICT file...

SUSE SLES11 Security Update : ImageMagick (SUSE-SU-2016:2964-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8862: Memory allocation failure in...

openSUSE Security Update : ImageMagick (openSUSE-2016-1282)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

openSUSE Security Update : ImageMagick (openSUSE-2016-1242)

This update for ImageMagick fixes the following issues : - CVE-2016-8684: Mismatch between real filesize and header values bsc1005123 - CVE-2016-8683: Check that filesize is reasonable compared to the header value bsc1005127 - CVE-2016-8682: Stack-buffer read overflow while reading SCT header...

SUSE SLED12 / SLES12 Security Update : ImageMagick (SUSE-SU-2016:2667-1)

This update for ImageMagick fixes the following issues: These vulnerabilities could be triggered by processing specially crafted image files, which could lead to a process crash or resource consumtion, or potentially have unspecified futher impact. - CVE-2016-8684: Mismatch between real filesize...

openSUSE Security Update : GraphicsMagick (openSUSE-2016-1229)

This update for GraphicsMagick fixes the following issues : - security update : - CVE-2016-8684 boo1005123 - CVE-2016-8682 boo1005125 - CVE-2016-8683 boo1005127 - security update : - CVE-2016-7529 boo1000399 - CVE-2016-7528 boo1000434 - CVE-2016-7515 boo1000689 - CVE-2016-7446 boo999673 -...

CVE-2014-7517

The CVE-2014-7517 entry affects the Myanmar Movies HD Android app (package com.wmyanmarmoviesHD) version 0.1. The app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via TLS. The NVD entry lists a MEDIUM s...