|
255231
|
7.8 |
HIGH
Local
|
libxls_project
|
libxls
|
An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memory corruption resulting in remote code ex…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-12111
|
2024-11-21 12:08 |
2017-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255232
|
7.8 |
HIGH
Local
|
libxls_project
|
libxls
|
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resulting in remote code execution.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-12110
|
2024-11-21 12:08 |
2017-11-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255233
|
7.8 |
HIGH
Local
|
microsoft
|
excel
|
Microsoft Excel 2016 Click-to-Run (C2R) allows an attacker to run arbitrary code in the context of the current user by failing to properly handle objects in memory, aka "Microsoft Office Memory Corru…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-11884
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255234
|
7.5 |
HIGH
Network
|
microsoft
|
aspnetcore
|
.NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Deni…
|
NVD-CWE-noinfo
|
CVE-2017-11883
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255235
|
8.8 |
HIGH
Network
|
microsoft
|
asp.net_core
|
ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core Elevation Of Privilege Vulnerability".
|
CWE-601
Open Redirect
|
CVE-2017-11879
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255236
|
3.1 |
LOW
Network
|
microsoft
|
chakracore edge
|
Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a target system, due to …
|
NVD-CWE-noinfo
|
CVE-2017-11874
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255237
|
4.7 |
MEDIUM
Local
|
microsoft
|
windows_server_2012 windows_7 windows_10 windows_server_2016 windows_8.1 windows_server_2008 windows_rt_8.1
|
Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attac…
|
CWE-200
Information Exposure
|
CVE-2017-11880
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255238
|
7.8 |
HIGH
Local
|
microsoft
|
excel office_compatibility_pack excel_viewer
|
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibi…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-11878
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255239
|
5.5 |
MEDIUM
Local
|
microsoft
|
excel office_compatibility_pack excel_viewer
|
Microsoft Excel 2007 Service Pack 3, Microsoft Excel 2010 Service Pack 2, Microsoft Excel 2013 Service Pack 1, Microsoft Excel 2013 RT Service Pack 1, Microsoft Excel 2016, Microsoft Office Compatibi…
|
NVD-CWE-noinfo
|
CVE-2017-11877
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255240
|
8.8 |
HIGH
Network
|
microsoft
|
project_server sharepoint_enterprise_server
|
Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read, use the victim's identity to…
|
CWE-352
Origin Validation Error
|
CVE-2017-11876
|
2024-11-21 12:08 |
2017-11-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|