|
251981
|
7.8 |
HIGH
Local
|
google
|
android
|
In all Qualcomm products with Android releases from CAF using the Linux kernel, due to lack of bounds checking on the variable "data_len" from the function WLANQCMBR_McProcessMsg, a buffer overflow m…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-14884
|
2024-11-21 12:13 |
2018-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251982
|
9.8 |
CRITICAL
Network
|
qualcomm
|
mdm9206_firmware mdm9607_firmware mdm9650_firmware s820a_firmware s820am_firmware sd_210_firmware sd_212_firmware sd_410_firmware sd_425_firmware sd_430_firmware sd_615_…
|
In Snapdragon Automobile, Snapdragon IoT and Snapdragon Mobile MDM9206 MDM9607, MDM9650, S820A, S820Am, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 430, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, S…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-14910
|
2024-11-21 12:13 |
2018-02-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251983
|
7.5 |
HIGH
Network
|
oxid-esales
|
eshop
|
OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.11 (legacy), Enterprise Edition before 6.0.0 RC3 (development), 5.2.x before 5.2.…
|
CWE-425
Direct Request ('Forced Browsing')
|
CVE-2017-14993
|
2024-11-21 12:13 |
2018-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251984
|
6.5 |
MEDIUM
Network
|
netfortris
|
trixbox
|
trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php.
|
CWE-22
Path Traversal
|
CVE-2017-14537
|
2024-11-21 12:13 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251985
|
5.4 |
MEDIUM
Network
|
netfortris
|
trixbox
|
trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14536
|
2024-11-21 12:13 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251986
|
8.8 |
HIGH
Network
|
netfortris
|
trixbox
|
trixbox 2.8.0.4 has OS command injection via shell metacharacters in the lang parameter to /maint/modules/home/index.php.
|
CWE-78
OS Command
|
CVE-2017-14535
|
2024-11-21 12:13 |
2018-02-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251987
|
6.5 |
MEDIUM
Network
|
asus
|
dsl-ac51_firmware dsl-ac52u_firmware dsl-ac55u_firmware dsl-n55u_c1_firmware dsl-n55u_d1_firmware dsl-ac56u_firmware dsl-n10_c1_firmware dsl-n12u_c1_firmware dsl-n12e_c1_firmw…
|
Multiple XML external entity (XXE) vulnerabilities in the AiCloud feature on ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, …
|
CWE-611
XXE
|
CVE-2017-14699
|
2024-11-21 12:13 |
2018-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251988
|
9.8 |
CRITICAL
Network
|
asus
|
dsl-ac51_firmware dsl-ac52u_firmware dsl-ac55u_firmware dsl-n55u_c1_firmware dsl-n55u_d1_firmware dsl-ac56u_firmware dsl-n10_c1_firmware dsl-n12u_c1_firmware dsl-n12e_c1_firmw…
|
ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and DSL-AC750 routers all…
|
CWE-287
Improper Authentication
|
CVE-2017-14698
|
2024-11-21 12:13 |
2018-01-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251989
|
8.8 |
HIGH
Network
|
atlassian
|
sourcetree
|
Sourcetree for Windows had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for Windows…
|
NVD-CWE-noinfo CWE-77
Command Injection
|
CVE-2017-14593
|
2024-11-21 12:13 |
2018-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251990
|
8.8 |
HIGH
Network
|
atlassian
|
sourcetree
|
Sourcetree for macOS had several argument and command injection bugs in Mercurial and Git repository handling. An attacker with permission to commit to a repository linked in Sourcetree for macOS is …
|
NVD-CWE-noinfo CWE-77
Command Injection
|
CVE-2017-14592
|
2024-11-21 12:13 |
2018-01-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|