|
246971
|
6.5 |
MEDIUM
Network
|
hitachi
|
device_manager
|
XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager before 8.5.2-00 allows authenticated remote users to read arbitrary files.
|
CWE-611
XXE
|
CVE-2017-9295
|
2024-11-21 12:35 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246972
|
9.8 |
CRITICAL
Network
|
hitachi
|
device_manager
|
RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute internal commands without authentication via RMI ports.
|
NVD-CWE-noinfo
|
CVE-2017-9294
|
2024-11-21 12:35 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246973
|
6.1 |
MEDIUM
Network
|
lansweeper
|
lansweeper
|
Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782.
|
CWE-79
Cross-site Scripting
|
CVE-2017-9292
|
2024-11-21 12:35 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246974
|
6.1 |
MEDIUM
Network
|
note_project
|
note
|
Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php (edit parameter).
|
CWE-79
Cross-site Scripting
|
CVE-2017-9289
|
2024-11-21 12:35 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246975
|
9.8 |
CRITICAL
Network
|
freeradius
|
freeradius
|
The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, …
|
CWE-287
Improper Authentication
|
CVE-2017-9148
|
2024-11-21 12:35 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246976
|
6.1 |
MEDIUM
Network
|
raygun
|
raygun4wp
|
The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php (backurl parameter).
|
CWE-79
Cross-site Scripting
|
CVE-2017-9288
|
2024-11-21 12:35 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246977
|
6.5 |
MEDIUM
Network
|
openldap debian redhat mcafee oracle
|
openldap debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_eus enterprise_linux_server_tus
|
servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free vulnerability. A user with access to search the directory can crash slapd by issuing a search including the Paged …
|
CWE-415
Double Free
|
CVE-2017-9287
|
2024-11-21 12:35 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246978
|
9.8 |
CRITICAL
Network
|
openvswitch
|
openvswitch
|
In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow message sent from the controller in `lib/ofp-util.c` in the function `ofputil_pull_ofp15_group_mod`.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-9265
|
2024-11-21 12:35 |
2017-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246979
|
9.8 |
CRITICAL
Network
|
openvswitch
|
openvswitch
|
In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer over-read while parsing malformed TCP, UDP, and IPv6 packets in the functions `extract_l3_ipv6`, `extr…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-9264
|
2024-11-21 12:35 |
2017-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246980
|
6.5 |
MEDIUM
Adjacent
|
openvswitch
|
openvswitch
|
In Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to the abort() function for undefined role status reasons in the function `ofp_print_role_status_message` i…
|
CWE-20
Improper Input Validation
|
CVE-2017-9263
|
2024-11-21 12:35 |
2017-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|