|
252721
|
6.5 |
MEDIUM
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a user's credentials, during an email…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2017-18695
|
2024-11-21 12:20 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252722
|
5.3 |
MEDIUM
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect format specifier is used. Th…
|
CWE-200
Information Exposure
|
CVE-2017-18694
|
2024-11-21 12:20 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252723
|
9.8 |
CRITICAL
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID is SVE-2016-7510 (January 20…
|
CWE-120
Classic Buffer Overflow
|
CVE-2017-18693
|
2024-11-21 12:20 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252724
|
8.1 |
HIGH
Network
|
google
|
android
|
An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a race condition, with a result…
|
CWE-362
Race Condition
|
CVE-2017-18692
|
2024-11-21 12:20 |
2020-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252725
|
6.5 |
MEDIUM
Adjacent
|
syska
|
smartlight_rainbow_led_smart_bulb_firmware
|
Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks.
|
CWE-200
Information Exposure
|
CVE-2017-18642
|
2024-11-21 12:20 |
2020-02-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252726
|
8.1 |
HIGH
Network
|
linuxcontainers
|
lxc
|
In LXC 2.0, many template scripts download code over cleartext HTTP, and omit a digital-signature check, before running it to bootstrap containers.
|
CWE-287
Improper Authentication
|
CVE-2017-18641
|
2024-11-21 12:20 |
2020-02-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252727
|
7.5 |
HIGH
Network
|
snakeyaml_project
fedoraproject
quarkus
oracle
|
snakeyaml
fedora
quarkus
peoplesoft_enterprise_pt_peopletools
|
The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
|
CWE-776
XML Entity Expansion
|
CVE-2017-18640
|
2024-11-21 12:20 |
2019-12-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252728
|
6.1 |
MEDIUM
Network
|
progress
|
sitefinity_cms
|
Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incid…
|
CWE-79
Cross-site Scripting
|
CVE-2017-18639
|
2024-11-21 12:20 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252729
|
7.5 |
HIGH
Network
|
graphite_project
|
graphite
|
send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server r…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-18638
|
2024-11-21 12:20 |
2019-10-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252730
|
7.5 |
HIGH
Network
|
esafenet
|
cdg
|
CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal.
|
CWE-22
Path Traversal
|
CVE-2017-18636
|
2024-11-21 12:20 |
2019-09-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
