|
250631
|
7.8 |
HIGH
Local
|
huawei
|
p8_lite_firmware mate_7_firmware mate_s_firmware p8_firmware honor_6_firmware honor_7_firmware shotx_firmware g8_firmware
|
The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earl…
|
CWE-77
Command Injection
|
CVE-2017-2692
|
2024-11-21 12:23 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250632
|
5.5 |
MEDIUM
Local
|
huawei
|
softco_firmware espace_u1910_firmware espace_u1911_firmware espace_u1930_firmware espace_u1960_firmware espace_u1980_firmware espace_u1981_firmware
|
SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software V200R003C20 and V20…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-2690
|
2024-11-21 12:23 |
2017-11-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250633
|
7.5 |
HIGH
Network
|
inpsyde
|
backwpup
|
Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download.
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2017-2551
|
2024-11-21 12:23 |
2017-09-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250634
|
7.5 |
HIGH
Network
|
puppet
|
puppetlabs-apache
|
Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust. If you specify the `ssl_ca` parameter but do not specify the `ssl_certs_di…
|
CWE-295
Improper Certificate Validation
|
CVE-2017-2299
|
2024-11-21 12:23 |
2017-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250635
|
7.5 |
HIGH
Network
|
kubik-rubik
|
easy_joomla_backup
|
Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily guessable filename.
|
CWE-200
Information Exposure
|
CVE-2017-2550
|
2024-11-21 12:23 |
2017-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250636
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications".
|
CWE-22
Path Traversal
|
CVE-2017-2258
|
2024-11-21 12:23 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250637
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.
|
CWE-79
Cross-site Scripting
|
CVE-2017-2257
|
2024-11-21 12:23 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250638
|
5.4 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".
|
CWE-79
Cross-site Scripting
|
CVE-2017-2256
|
2024-11-21 12:23 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250639
|
5.4 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
|
CWE-79
Cross-site Scripting
|
CVE-2017-2255
|
2024-11-21 12:23 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250640
|
4.9 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input
|
CWE-20
Improper Input Validation
|
CVE-2017-2254
|
2024-11-21 12:23 |
2017-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|