|
247211
|
8.1 |
HIGH
Network
|
arm
|
arm_trusted_firmware
|
In ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing attackers to bypass the MT_EXECUTE_NEVER protection mechanism. This issue occurs because of inconsistency i…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-7563
|
2024-11-21 12:32 |
2017-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247212
|
5.5 |
MEDIUM
Local
|
freedesktop
|
poppler
|
poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.
|
CWE-674
Uncontrolled Recursion
|
CVE-2017-7515
|
2024-11-21 12:32 |
2017-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247213
|
7.5 |
HIGH
Network
|
apache
|
hadoop
|
In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated u…
|
CWE-20
Improper Input Validation
|
CVE-2017-7669
|
2024-11-21 12:32 |
2017-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247214
|
5.5 |
MEDIUM
Local
|
freedesktop
|
poppler
|
poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents.
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-7511
|
2024-11-21 12:32 |
2017-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247215
|
7.5 |
HIGH
Network
|
mozilla
|
network_security_services
|
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
|
-
|
CVE-2017-7502
|
2024-11-21 12:32 |
2017-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247216
|
8.8 |
HIGH
Network
|
moxa
|
oncell_g3110-hspa_firmware oncell_g3110-hsdpa_firmware oncell_g3150-hsdpa_firmware oncell_5104-hsdpa_firmware oncell_5104-hspa_firmware oncell_5004-hspa_firmware
|
A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCe…
|
CWE-352
Origin Validation Error
|
CVE-2017-7917
|
2024-11-21 12:32 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247217
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3110-hspa_firmware oncell_g3110-hsdpa_firmware oncell_g3150-hsdpa_firmware oncell_5104-hsdpa_firmware oncell_5104-hspa_firmware oncell_5004-hspa_firmware
|
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 0912…
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2017-7915
|
2024-11-21 12:32 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247218
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3110-hspa_firmware oncell_g3110-hsdpa_firmware oncell_g3150-hsdpa_firmware oncell_5104-hsdpa_firmware oncell_5104-hspa_firmware oncell_5004-hspa_firmware
|
A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions,…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2017-7913
|
2024-11-21 12:32 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247219
|
7.5 |
HIGH
Network
|
fortinet
|
fortiportal
|
A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2017-7731
|
2024-11-21 12:32 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247220
|
8.8 |
HIGH
Network
|
theforeman
|
foreman
|
Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted b…
|
CWE-269
Improper Privilege Management
|
CVE-2017-7505
|
2024-11-21 12:32 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|