|
249331
|
8.8 |
HIGH
Network
|
atla
|
electronic_tendering_and_bid_opening_system
|
Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unsp…
|
CWE-426
Untrusted Search Path
|
CVE-2017-2178
|
2024-11-21 12:23 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249332
|
8.8 |
HIGH
Network
|
shogyo
|
touki_denshi
|
Untrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
|
CWE-426
Untrusted Search Path
|
CVE-2017-2177
|
2024-11-21 12:23 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249333
|
7.8 |
HIGH
Local
|
jasdf
|
screensavers
|
Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) availa…
|
CWE-426
Untrusted Search Path
|
CVE-2017-2176
|
2024-11-21 12:23 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249334
|
6.5 |
MEDIUM
Network
|
groupsession
|
groupsession
|
GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.
|
CWE-200
Information Exposure
|
CVE-2017-2165
|
2024-11-21 12:23 |
2017-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249335
|
5.3 |
MEDIUM
Network
|
juniper
|
junos_space
|
On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can easily create a denial of service condition.
|
NVD-CWE-noinfo
|
CVE-2017-2311
|
2024-11-21 12:23 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249336
|
5.3 |
MEDIUM
Network
|
juniper
|
junos_space
|
A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain crafted packets, representing a network integrity risk.
|
NVD-CWE-noinfo
|
CVE-2017-2310
|
2024-11-21 12:23 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249337
|
5.9 |
MEDIUM
Network
|
juniper
|
junos_space
|
On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some restricted web services are accessible over the network. Th…
|
CWE-200
Information Exposure
|
CVE-2017-2309
|
2024-11-21 12:23 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249338
|
6.5 |
MEDIUM
Network
|
juniper
|
junos_space
|
An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to read arbitrary files on the device.
|
CWE-611
XXE
|
CVE-2017-2308
|
2024-11-21 12:23 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249339
|
6.1 |
MEDIUM
Network
|
juniper
|
junos_space
|
A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may allow remote attackers to steal sensitive information or pe…
|
CWE-79
Cross-site Scripting
|
CVE-2017-2307
|
2024-11-21 12:23 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249340
|
8.8 |
HIGH
Network
|
juniper
|
junos_space
|
On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space administrative web interface can execute code on the device.
|
CWE-863
Incorrect Authorization
|
CVE-2017-2306
|
2024-11-21 12:23 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|