|
251621
|
8.8 |
HIGH
Network
|
google
debian
|
chrome
debian_linux
|
Insufficient enforcement of Content Security Policy in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to open javascript: URL windows when they should not be allowed to via a …
|
NVD-CWE-noinfo
|
CVE-2017-15387
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251622
|
6.5 |
MEDIUM
Network
|
google
debian
|
chrome
debian_linux
|
Incorrect implementation in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.
|
CWE-20
Improper Input Validation
|
CVE-2017-15386
|
2024-11-21 12:14 |
2018-02-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251623
|
9.8 |
CRITICAL
Network
|
fasterxml
debian
redhat
netapp
oracle
|
jackson-databind
debian_linux
openshift_container_platform
satellite
satellite_capsule
jboss_enterprise_application_platform
oncommand_balance
snapcenter
oncommand_shift
on…
|
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously craft…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2017-15095
|
2024-11-21 12:14 |
2018-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251624
|
8.8 |
HIGH
Network
|
cloudera
|
data_science_workbench
|
An issue was discovered in Cloudera Data Science Workbench (CDSW) 1.x before 1.2.0. Several web application vulnerabilities allow malicious authenticated users of CDSW to escalate privileges in CDSW.…
|
CWE-269
Improper Privilege Management
|
CVE-2017-15536
|
2024-11-21 12:14 |
2018-02-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251625
|
8.8 |
HIGH
Network
|
asus
|
asuswrt
|
Password are stored in plaintext in nvram in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt.
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2017-15656
|
2024-11-21 12:14 |
2018-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251626
|
9.6 |
CRITICAL
Network
|
asus
|
asuswrt
|
Multiple buffer overflow vulnerabilities exist in the HTTPd server in Asus asuswrt version <=3.0.0.4.376.X. All have been fixed in version 3.0.0.4.378, but this vulnerability was not previously discl…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-15655
|
2024-11-21 12:14 |
2018-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251627
|
8.3 |
HIGH
Network
|
asus
|
asuswrt
|
Highly predictable session tokens in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allow gaining administrative router access.
|
CWE-330
Use of Insufficiently Random Values
|
CVE-2017-15654
|
2024-11-21 12:14 |
2018-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251628
|
8.8 |
HIGH
Network
|
asus
|
asuswrt
|
Improper administrator IP validation after his login in the HTTPd server in all current versions (<= 3.0.0.4.380.7743) of Asus asuswrt allows an unauthorized user to execute any action knowing admini…
|
CWE-613
Insufficient Session Expiration
|
CVE-2017-15653
|
2024-11-21 12:14 |
2018-02-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251629
|
7.5 |
HIGH
Network
|
miekg-dns_prject
|
miekg-dns
|
A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-15133
|
2024-11-21 12:14 |
2018-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251630
|
7.5 |
HIGH
Network
|
dovecot
debian
canonical
|
dovecot
debian_linux
ubuntu_linux
|
A flaw was found in dovecot 2.0 up to 2.2.33 and 2.3.0. An abort of SASL authentication results in a memory leak in dovecot's auth client used by login processes. The leak has impact in high performa…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-15132
|
2024-11-21 12:14 |
2018-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
