|
250001
|
8.8 |
HIGH
Adjacent
|
iodata
|
ts-ptcam\/poe_firmware ts-ptcam_firmware ts-wrlc_firmware ts-wlc2_firmware ts-wlce_firmware ts-wptcam2_firmware ts-wptcam_firmware
|
TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and …
|
CWE-78
OS Command
|
CVE-2017-2112
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250002
|
6.1 |
MEDIUM
Network
|
iodata
|
ts-ptcam\/poe_firmware ts-ptcam_firmware ts-wrlc_firmware ts-wlc2_firmware ts-wlce_firmware ts-wptcam2_firmware ts-wptcam_firmware
|
HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earl…
|
CWE-93
CRLF Injection
|
CVE-2017-2111
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250003
|
5.9 |
MEDIUM
Network
|
nissan_securities
|
access_cx
|
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sen…
|
CWE-295
Improper Certificate Validation
|
CVE-2017-2110
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250004
|
2.5 |
LOW
Local
|
cybozu
|
kunai
|
Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application.
|
CWE-200
Information Exposure
|
CVE-2017-2109
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250005
|
7.8 |
HIGH
Local
|
softbank
|
primedrive_desktop_application
|
Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
|
CWE-426
Untrusted Search Path
|
CVE-2017-2108
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250006
|
7.8 |
HIGH
Local
|
akky
|
7-zip32.dll
|
Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified …
|
CWE-426
Untrusted Search Path
|
CVE-2017-2107
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250007
|
6.1 |
MEDIUM
Network
|
webmin
|
webmin
|
Multiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2017-2106
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250008
|
5.9 |
MEDIUM
Network
|
presentcast_inc
|
tver
|
The TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafte…
|
CWE-200
Information Exposure
|
CVE-2017-2105
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250009
|
5.9 |
MEDIUM
Network
|
k-opticom_corporation
|
business_lala_call
|
The Business LaLa Call App for Android 1.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informatio…
|
CWE-200
Information Exposure
|
CVE-2017-2104
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250010
|
5.9 |
MEDIUM
Network
|
k-opticom_corporation
|
lala_call
|
The LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a c…
|
CWE-200
Information Exposure
|
CVE-2017-2103
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|