|
247261
|
7.1 |
HIGH
Local
|
artifex
|
jbig2dec
|
Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive information from process memory, because of an integer overflow in …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-7885
|
2024-11-21 12:32 |
2017-04-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247262
|
8.8 |
HIGH
Network
|
mantisbt
|
mantisbt
|
MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2017-7615
|
2024-11-21 12:32 |
2017-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247263
|
9.8 |
CRITICAL
Network
|
libreoffice
|
libreoffice
|
LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.
|
CWE-787
Out-of-bounds Write
|
CVE-2017-7882
|
2024-11-21 12:32 |
2017-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247264
|
8.8 |
HIGH
Network
|
bigtreecms
|
bigtree_cms
|
BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing the required admin/developer/ URI within a query string in an…
|
CWE-352
Origin Validation Error
|
CVE-2017-7881
|
2024-11-21 12:32 |
2017-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247265
|
7.5 |
HIGH
Network
|
flatcore
|
flatcore-cms
|
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.
|
CWE-89
SQL Injection
|
CVE-2017-7879
|
2024-11-21 12:32 |
2017-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247266
|
9.8 |
CRITICAL
Network
|
flatcore
|
flatcore-cms
|
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.
|
CWE-89
SQL Injection
|
CVE-2017-7878
|
2024-11-21 12:32 |
2017-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247267
|
8.8 |
HIGH
Network
|
flatcore
|
flatcore-cms
|
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
|
CWE-352
Origin Validation Error
|
CVE-2017-7877
|
2024-11-21 12:32 |
2017-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247268
|
9.8 |
CRITICAL
Network
|
feh_project
|
feh
|
In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundary heap write while receiving an IPC message. An integer o…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-7875
|
2024-11-21 12:32 |
2017-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247269
|
6.1 |
MEDIUM
Network
|
tdm_project
|
tdm
|
trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter).
|
CWE-79
Cross-site Scripting
|
CVE-2017-7871
|
2024-11-21 12:32 |
2017-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247270
|
8.8 |
HIGH
Network
|
sap
|
netweaver_application_server_java
|
SQL injection vulnerability in the getUserUddiElements method in the ES UDDI component in SAP NetWeaver AS Java 7.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified…
|
CWE-89
SQL Injection
|
CVE-2017-7717
|
2024-11-21 12:32 |
2017-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|