|
248221
|
8.8 |
HIGH
Network
|
brother
|
mfc-j960dwn_firmware
|
Cross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
|
CWE-352
Origin Validation Error
|
CVE-2017-2244
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248222
|
6.1 |
MEDIUM
Network
|
dfactory
|
responsive_lightbox
|
Cross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2017-2243
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248223
|
5.3 |
MEDIUM
Local
|
marp
|
marp
|
Marp versions v0.0.10 and earlier may allow an attacker to access local resources and files using JavaScript.
|
CWE-200
Information Exposure
|
CVE-2017-2239
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248224
|
8.8 |
HIGH
Network
|
toshiba
|
hem-gw16a_firmware hem-gw26a_firmware
|
Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier …
|
CWE-352
Origin Validation Error
|
CVE-2017-2238
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248225
|
9.8 |
CRITICAL
Network
|
toshiba
|
hem-gw16a_firmware hem-gw26a_firmware
|
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands vi…
|
CWE-78
OS Command
|
CVE-2017-2237
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248226
|
9.8 |
CRITICAL
Network
|
toshiba
|
hem-gw16a_firmware hem-gw26a_firmware
|
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-2236
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248227
|
9.8 |
CRITICAL
Network
|
toshiba
|
hem-gw16a_firmware hem-gw26a_firmware
|
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to cha…
|
NVD-CWE-noinfo
|
CVE-2017-2235
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248228
|
9.8 |
CRITICAL
Network
|
toshiba
|
hem-gw16a_firmware hem-gw26a_firmware
|
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented …
|
NVD-CWE-noinfo
|
CVE-2017-2234
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248229
|
7.8 |
HIGH
Local
|
moj
|
pdf_digital_signature
|
Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an…
|
CWE-426
Untrusted Search Path
|
CVE-2017-2233
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248230
|
7.8 |
HIGH
Local
|
moj
|
shinseiyo_sogo_soft
|
Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
|
CWE-426
Untrusted Search Path
|
CVE-2017-2232
|
2024-11-21 12:23 |
2017-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|