Lucene search
+L

13133 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/03/13 12:00 a.m.•77 views

JVN#56764650: ViX may insecurely load Dynamic Link Libraries

ViX provided by K_OKADA is a Graphics Viewer Software for Windows. ViX contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries contained in the same directory as an image file CWE-427. Impact Arbitrary code may be executed with the privileges of the...

7.8CVSS7.7AI score0.00909EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2018/03/12 12:00 a.m.•20 views

Solaris 10 (x86) : 140456-01

X11 6.6.2x86: VNC Viewer patch. Date this patch was last updated by Sun : Jan/05/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

10CVSS6.6AI score0.04052EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/03/12 12:00 a.m.•39 views

Solaris 10 (sparc) : 120739-08

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Gnome PDF viewer. The supported version that is affected is 10. Very difficult to exploit vulnerability allows successful unauthenticated network attacks via None. Successful attack of this vulnerability can result ...

5.1CVSS5.4AI score0.02189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/03/12 12:00 a.m.•28 views

Solaris 10 (x86) : 120740-08

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Gnome PDF viewer. The supported version that is affected is 10. Very difficult to exploit vulnerability allows successful unauthenticated network attacks via None. Successful attack of this vulnerability can result ...

5.1CVSS5.4AI score0.02189EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2018/03/12 12:00 a.m.•46 views

Solaris 10 (sparc) : 140455-01

X11 6.6.2: VNC Viewer patch. Date this patch was last updated by Sun : Jan/05/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

10CVSS6.6AI score0.04052EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2018/02/23 10:29 p.m.•17 views

CVE-2017-16769

Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode...

5.3CVSS5.8AI score0.01851EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/23 10:29 p.m.•31 views

Design/Logic Flaw

Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode...

5CVSS5.2AI score0.01851EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2018/02/23 10:00 p.m.•66 views

CVE-2017-16769

Technical details about CVE-2017-16769 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories for Synology Photo Station 6.8.1-3458.

5.3CVSS5.2AI score0.01851EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2018/02/23 10:00 p.m.•37 views

CVE-2017-16769

Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode...

5.2AI score0.01851EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/23 12:00 a.m.•6 views

CVE-2017-16769: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of private information vulnerability in Photo Viewer in Synology Photo Station 6.8.1-3458 allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode...

5.3CVSS6AI score0.01851EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2018/02/23 12:00 a.m.•6 views

PT-2018-6332

Name of the Vulnerable Software and Affected Versions: Synology Photo Station version 6.8.1-3458 Description: The issue allows remote attackers to obtain metadata from password-protected photographs via the map viewer mode in the Photo Viewer component. Recommendations: For Synology Photo Station...

5.3CVSS0.01851EPSS
SaveExploits0References3
Fedora
Fedora
•added 2018/02/22 2:55 p.m.•47 views

[SECURITY] Fedora 27 Update: mupdf-1.12.0-5.fc27

MuPDF is a lightweight PDF viewer and toolkit written in portable C. The renderer in MuPDF is tailored for high quality anti-aliased graphics. MuPDF renders text with metrics and spacing accurate to within fractions of a pixel for the highest fidelity in reproducing the look of a printed page on...

7.8CVSS0.6AI score0.01906EPSS
SaveExploits4
osv_debian
osv_debian
•added 2018/02/19 6:29 p.m.•12 views

DEBIAN-CVE-2018-7247

An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input rootname can overflow a buffer, leading potentially to arbitrary code execution or possibly unspecified other impact...

9.8CVSS8.4AI score0.02466EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2018/02/18 10:49 a.m.•14 views

wartsila-hyundai.com XSS vulnerability

Open Bug Bounty ID: OBB-562962 Description| Value ---|--- Affected Website:| wartsila-hyundai.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
osv_cve
osv_cve
•added 2018/02/15 2:29 a.m.•19 views

CVE-2018-0851

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Offi...

8.8CVSS6.3AI score0.19111EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/15 12:00 a.m.•8 views

CVE-2018-0851: Out-of-bounds Write

Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run C2R allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Offi...

9.3CVSS8.2AI score0.19111EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/02/15 12:00 a.m.•22 views

Adobe PDF Buffer Overflow Code Execution

The vulnerability of Adobe’s software for viewing and editing PDF files arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause memory corruption and execute arbitrary code remotely...

10CVSS8.5AI score0.09086EPSS
SaveExploits0References4Affected Software2
Tenable Nessus
Tenable Nessus
•added 2018/02/14 12:00 a.m.•61 views

Security Updates for Microsoft Word Viewer (February 2018)

The Microsoft Word Viewer application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in...

9.3CVSS8.6AI score0.19111EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/02/14 12:00 a.m.•85 views

Microsoft Office Word Viewer Remote Code Execution Vulnerability (KB4011703)

This host is missing an important security update according to Microsoft KB4011703 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

9.3CVSS8.6AI score0.19111EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/02/14 12:00 a.m.•110 views

Microsoft Windows Multiple Vulnerabilities (KB4074592)

This host is missing a critical security update according to Microsoft KB4074592 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.7AI score0.65312EPSS
SaveExploits45References1
Rows per page
Query Builder