|
251621
|
7.8 |
HIGH
Local
|
ikarussecurity
|
anti.virus
|
ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption vulnerability via a 0x83000084 DeviceIoControl request.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-17114
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251622
|
5.5 |
MEDIUM
Local
|
ikarussecurity
|
anti.virus
|
ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a 0x830000c4 DeviceIoControl request.
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-17113
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251623
|
7.8 |
HIGH
Local
|
ikarussecurity
|
anti.virus
|
ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via a 0x83000058 DeviceIoControl request.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-17112
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251624
|
7.5 |
HIGH
Network
|
fiyo
|
fiyo_cms
|
Fiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file.php via $_GET['src'] or $_GET['name'].
|
CWE-200
Information Exposure
|
CVE-2017-17104
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251625
|
8.8 |
HIGH
Network
|
fiyo
|
fiyo_cms
|
Fiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]. This vulnerability can lead to escalation from normal user privileges to administrator privileges.
|
CWE-89
SQL Injection
|
CVE-2017-17103
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251626
|
7.5 |
HIGH
Network
|
fiyo
|
fiyo_cms
|
Fiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].
|
CWE-89
SQL Injection
|
CVE-2017-17102
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251627
|
7.8 |
HIGH
Local
|
flexense
|
syncbreeze
|
There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possi…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-17099
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251628
|
6.1 |
MEDIUM
Network
|
content_cards_project
|
content_cards
|
Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary JavaScript via crafted OpenGraph data.
|
CWE-79
Cross-site Scripting
|
CVE-2017-17096
|
2024-11-21 12:17 |
2017-12-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251629
|
8.8 |
HIGH
Network
|
libtiff
|
libtiff
|
tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow and application crash) or possibly have unspecified other …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-17095
|
2024-11-21 12:17 |
2017-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251630
|
5.4 |
MEDIUM
Network
|
wordpress debian
|
wordpress debian_linux
|
wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to conduct XSS attacks via a crafted URL.
|
CWE-79
Cross-site Scripting
|
CVE-2017-17094
|
2024-11-21 12:17 |
2017-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|