|
252701
|
4.8 |
MEDIUM
Network
|
yoast
|
wordpress_seo
|
Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPress allows remote attackers to inject arbitrary web script o…
|
CWE-79
Cross-site Scripting
|
CVE-2017-16842
|
2024-11-21 12:17 |
2017-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252702
|
6.1 |
MEDIUM
Network
|
lansweeper
|
lansweeper
|
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.
|
CWE-79
Cross-site Scripting
|
CVE-2017-16841
|
2024-11-21 12:17 |
2017-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252703
|
7.8 |
HIGH
Local
|
trusted_boot_project
|
trusted_boot
|
Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to overwrite dynamic PCRs of Trusted Platform Module…
|
CWE-20
Improper Input Validation
|
CVE-2017-16837
|
2024-11-21 12:17 |
2017-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252704
|
6.1 |
MEDIUM
Network
|
commscope
|
arris_tg1682g_firmware
|
Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-16836
|
2024-11-21 12:17 |
2017-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252705
|
7.8 |
HIGH
Local
|
pnp4nagios
|
pnp4nagios
|
PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, which allows local users to gain privileges by leveraging acc…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-16834
|
2024-11-21 12:17 |
2017-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252706
|
6.1 |
MEDIUM
Network
|
gemirro_project
|
gemirro
|
Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.
|
CWE-79
Cross-site Scripting
|
CVE-2017-16833
|
2024-11-21 12:17 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252707
|
7.8 |
HIGH
Local
|
gnu
|
binutils
|
The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dic…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-16832
|
2024-11-21 12:17 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252708
|
7.8 |
HIGH
Local
|
gnu
|
binutils
|
coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of servi…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-16831
|
2024-11-21 12:17 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252709
|
7.8 |
HIGH
Local
|
gnu
|
binutils
|
The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (seg…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-16830
|
2024-11-21 12:17 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252710
|
7.8 |
HIGH
Local
|
gnu
|
binutils
|
The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, whi…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-16829
|
2024-11-21 12:17 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|