Allen Bradley Micrologix 1400 Series B FRN Access Control Vulnerability

Allen Bradley Micrologix 1400 Series B FRN is a programmable logic controller from Rockwell Automation. An access control vulnerability exists in the data, program, and function file permissions functions in the Allen Bradley Micrologix 1400 Series B FRN version 21.2 and earlier. An attacker coul...

CVE-2018-0150

creationtimestamp| type| source ---|---|--- 2018-03-30 12:01:10+00:00| seen| https://t.me/informationsecuritychannel/15590 2025-05-21 21:02:18+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lppir3iuyy2m...

Archon Cross-Site Scripting Vulnerability

Archon is a system of online catalog sites for manuscript collections at the Maine Maritime Museum. A cross-site scripting vulnerability exists in the packages/core/contact.php file in Archon version 3.21 rev-1. A remote attacker can exploit this vulnerability to inject arbitrary web script or HT...

iTech Gigs Script SQL Injection Vulnerability

iTech Gigs Script is an e-commerce website building system. The system features user registration, quotes and comments. A SQL injection vulnerability exists in iTech Gigs Script version 1.21. A remote attacker can inject SQL commands by sending the 'sc' parameter to the browse-scategory.php file ...

CVE-2017-14331

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive shell...

CVE-2017-14327

Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files...

Extreme EXOS Elevation of Privilege Vulnerability

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An elevation of privilege vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to obtain a root shell. An attacker can exploit this vulnerability to obtain a...

Extreme EXOS Arbitrary File Read Vulnerability

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An arbitrary file read vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. An attacker can exploit this vulnerability to read arbitrary files. An attacker can exploit this vulnerability to read...

Extreme EXOS elevation of privilege vulnerability (CNVD-2017-32702)

Extreme EXOS is a new generation modular switch operating system from Extreme Networks. An elevation of privilege vulnerability exists in Extreme EXOS versions 16.x, 21.x, and 22.x. The vulnerability can be exploited to obtain a root shell. An attacker can exploit this vulnerability to obtain a...

CVE-2017-8755

creationtimestamp| type| source ---|---|--- 2017-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42766...

CVE-2017-8740

creationtimestamp| type| source ---|---|--- 2017-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42764...

HashiCorp Vagrant VMware Fusion Plugin Elevation of Privilege Vulnerability

HashiCorp Vagrant VMware Fusion plugin is a tool for building and managing virtual machine environments on VMware virtual machines developed by HashiCorp, USA. A security vulnerability exists in the sudo helper in HashiCorp Vagrant VMware Fusion plugin versions prior to 4.0.21. A local attacker...

CVE-2017-8491

creationtimestamp| type| source ---|---|--- 2017-06-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42215...

VulnCheck KEV: CVE-2003-0127

The kernel module loader in Linux kernel 2.2.x before 2.2.25, and 2.4.x before 2.4.21, allows local users to gain root privileges by using ptrace to attach to a child process that is spawned by the kernel...

CVE-2017-6680

A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create arbitrary directories on the affected system. More Information: CSCvc76652. Known Affected Releases: 21.0.0...

DEBIAN-CVE-2017-8908

The marklinetr function in gxscanc.c in Artifex Ghostscript 9.21 allows remote attackers to cause a denial of service out-of-bounds read via a crafted PostScript document...

CVE-2017-7229

PGP/MIME encrypted messages injected into a Vaultive O365 before 4.5.21 frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-encrypted"; boundary="abc123abc123"' to 'Content-Type: text/plain' - this results in the encrypted...

OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

CVE-2017-5594

creationtimestamp| type| source ---|---|--- 2017-01-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41143 2024-04-25 22:41:36+00:00| seen| https://t.me/arpsyndicate/4884...

PT-2016-7789 · Artifex +3 · Ghostscript +3

Name of the Vulnerable Software and Affected Versions: ghostscript versions prior to 9.21 Description: The issue is related to a heap-based buffer overflow found in the jbig2 decode gray scale image function, which is used for decoding halftone segments in JBIG2 images. A document, such as...