|
250751
|
3.5 |
LOW
Physics
|
oracle
|
flexcube_universal_banking
|
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.…
|
NVD-CWE-noinfo
|
CVE-2017-3235
|
2024-11-21 12:25 |
2017-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250752
|
4.3 |
MEDIUM
Network
|
oracle
|
jre
jdk
|
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u11…
|
CWE-200
Information Exposure
|
CVE-2017-3231
|
2024-11-21 12:25 |
2017-01-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250753
|
8.8 |
HIGH
Network
|
libxls_project
|
libxls
|
An exploitable Out-of-bounds Write vulnerability exists in the xls_addCell function of libxls 2.0. A specially crafted xls file can cause a memory corruption resulting in remote code execution. An at…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-2910
|
2024-11-21 12:24 |
2020-12-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250754
|
7.5 |
HIGH
Network
|
redhat
|
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_server_eus
|
A denial of service flaw was found in the way BIND handled DNSSEC validation. A remote attacker could use this flaw to make named exit unexpectedly with an assertion failure via a specially crafted D…
|
CWE-617
Reachable Assertion
|
CVE-2017-3139
|
2024-11-21 12:24 |
2019-04-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250755
|
2.1 |
LOW
Physics
|
hp
|
tommy_hilfiger_th24\/7
|
A potential security vulnerability caused by incomplete obfuscation of application configuration information was discovered in Tommy Hilfiger TH24/7 Android app versions 2.0.0.11, 2.0.1.14, 2.1.0.16,…
|
CWE-254
7PK - Security Features
|
CVE-2017-2752
|
2024-11-21 12:24 |
2019-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250756
|
7.5 |
HIGH
Network
|
hp
|
isaac_mizrahi_smartwatch
|
A potential security vulnerability caused by the use of insecure (http) transactions during login has been identified with early versions of the Isaac Mizrahi Smartwatch mobile app. HP has no access …
|
CWE-254
7PK - Security Features
|
CVE-2017-2748
|
2024-11-21 12:24 |
2019-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250757
|
7.5 |
HIGH
Network
|
apache
|
solr
|
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism, a remote attacker with access to the se…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-3164
|
2024-11-21 12:24 |
2019-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250758
|
7.8 |
HIGH
Local
|
isc
|
bind
|
The BIND installer on Windows uses an unquoted service path which can enable a local user to achieve privilege escalation if the host file system permissions allow this. Affects BIND 9.2.6-P2->9.2.9,…
|
CWE-428
Unquoted Search Path or Element
|
CVE-2017-3141
|
2024-11-21 12:24 |
2019-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250759
|
5.9 |
MEDIUM
Network
|
isc
netapp
|
bind
data_ontap_edge
oncommand_balance
element_software
|
If named is configured to use Response Policy Zones (RPZ) an error processing some rule types can lead to a condition where BIND will endlessly loop while handling a query. Affects BIND 9.9.10, 9.10.…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-3140
|
2024-11-21 12:24 |
2019-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250760
|
7.5 |
HIGH
Network
|
isc
redhat
debian
netapp
juniper
|
bind
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server
enterprise_linux_server_eus
debian_linu…
|
BIND was improperly sequencing cleanup operations on upstream recursion fetch contexts, leading in some cases to a use-after-free error that can trigger an assertion failure and crash in named. Affec…
|
CWE-416
Use After Free
|
CVE-2017-3145
|
2024-11-21 12:24 |
2019-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
