|
249771
|
6.1 |
MEDIUM
Network
|
z-url_preview_project
|
z-url_preview
|
The Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-18012
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249772
|
6.1 |
MEDIUM
Network
|
clickbank
|
affiliate_ads_for_clickbank_products
|
The MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php border_color parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-18011
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249773
|
6.1 |
MEDIUM
Network
|
e-goi
|
smart_marketing_sms_and_newsletters_forms
|
The E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the admin/partials/custom/egoi-for-wp-form_egoi.php url parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-18010
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249774
|
7.5 |
HIGH
Network
|
opencv
|
opencv
|
In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-18009
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249775
|
6.5 |
MEDIUM
Network
|
imagemagick canonical
|
imagemagick ubuntu_linux
|
In ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-18008
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249776
|
6.1 |
MEDIUM
Network
|
extensis
|
portfolio_netpublish
|
netpub/server.np in Extensis Portfolio NetPublish has XSS in the quickfind parameter, aka Open Bug Bounty ID OBB-290447.
|
CWE-79
Cross-site Scripting
|
CVE-2017-18006
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249777
|
5.5 |
MEDIUM
Local
|
exiv2 debian
|
exiv2 debian_linux
|
Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-18005
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249778
|
5.4 |
MEDIUM
Network
|
zurmo
|
zurmo_crm
|
Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
|
CWE-79
Cross-site Scripting
|
CVE-2017-18004
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249779
|
9.8 |
CRITICAL
Network
|
trustwave
|
secure_web_gateway
|
Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, vi…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-18001
|
2024-11-21 12:19 |
2018-01-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249780
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-17997
|
2024-11-21 12:19 |
2017-12-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|