|
255491
|
9.8 |
CRITICAL
Network
|
nexusphp
|
nexusphp
|
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
|
CWE-89
SQL Injection
|
CVE-2017-13669
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255492
|
5.5 |
MEDIUM
Local
|
multicorewareinc
|
x265
|
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2017-13666
|
2024-11-21 12:11 |
2017-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255493
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exi…
|
CWE-617
Reachable Assertion
|
CVE-2017-13658
|
2024-11-21 12:11 |
2017-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255494
|
5.5 |
MEDIUM
Local
|
unrealircd
|
unrealircd
|
UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root accou…
|
CWE-665
Improper Initialization
|
CVE-2017-13649
|
2024-11-21 12:11 |
2017-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255495
|
6.5 |
MEDIUM
Network
|
graphicsmagick
|
graphicsmagick
|
In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-13648
|
2024-11-21 12:11 |
2017-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255496
|
8.8 |
HIGH
Network
|
graphicsmagick
|
graphicsmagick
|
In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file has a MEND chunk with a large length value.
|
CWE-20
Improper Input Validation
|
CVE-2017-13147
|
2024-11-21 12:11 |
2017-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255497
|
6.1 |
MEDIUM
Network
|
qodeinteractive
|
bridge
|
DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript.
|
CWE-79
Cross-site Scripting
|
CVE-2017-13138
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255498
|
9.8 |
CRITICAL
Network
|
formcrafts
|
formcraft
|
The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.
|
CWE-89
SQL Injection
|
CVE-2017-13137
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255499
|
8.8 |
HIGH
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-13146
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255500
|
6.5 |
MEDIUM
Network
|
imagemagick debian canonical
|
imagemagick debian_linux ubuntu_linux
|
In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geometry, leading to a crash.
|
CWE-20
Improper Input Validation
|
CVE-2017-13145
|
2024-11-21 12:11 |
2017-08-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|