|
254971
|
5.9 |
MEDIUM
Network
|
netapp
|
data_ontap
|
NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2017-12859
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254972
|
6.1 |
MEDIUM
Network
|
nexusphp_project
|
nexusphp
|
Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.
|
CWE-79
Cross-site Scripting
|
CVE-2017-12680
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254973
|
7.5 |
HIGH
Network
|
libtiff
|
libtiff
|
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and appl…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2017-12944
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254974
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-600_b1_firmware
|
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the …
|
CWE-22
Path Traversal
|
CVE-2017-12943
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254975
|
9.8 |
CRITICAL
Network
|
rarlab
|
unrar
|
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-12942
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254976
|
9.8 |
CRITICAL
Network
|
rarlab
|
unrar
|
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-12941
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254977
|
9.8 |
CRITICAL
Network
|
rarlab
|
unrar
|
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-12940
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254978
|
9.8 |
CRITICAL
Network
|
unity3d
|
unity_editor
|
A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before…
|
CWE-20
Improper Input Validation
|
CVE-2017-12939
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254979
|
7.5 |
HIGH
Network
|
rarlab
|
unrar
|
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
|
CWE-22
Path Traversal
|
CVE-2017-12938
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254980
|
8.8 |
HIGH
Network
|
graphicsmagick debian
|
graphicsmagick debian_linux
|
The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-12937
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|