|
256391
|
9.8 |
CRITICAL
Network
|
nexusphp_project
|
nexusphp
|
SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter.
|
CWE-89
SQL Injection
|
CVE-2017-12776
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256392
|
5.9 |
MEDIUM
Network
|
netapp
|
data_ontap
|
NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspecified vectors.
|
CWE-20
Improper Input Validation
|
CVE-2017-12859
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256393
|
6.1 |
MEDIUM
Network
|
nexusphp_project
|
nexusphp
|
Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php.
|
CWE-79
Cross-site Scripting
|
CVE-2017-12680
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256394
|
7.5 |
HIGH
Network
|
libtiff
|
libtiff
|
The TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attackers to cause a denial of service (allocation failure and appl…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2017-12944
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256395
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-600_b1_firmware
|
D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/__show_info.php?REQUIRE_FILE= absolute path traversal attack, as demonstrated by discovering the …
|
CWE-22
Path Traversal
|
CVE-2017-12943
|
2024-11-21 12:10 |
2017-08-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256396
|
9.8 |
CRITICAL
Network
|
rarlab
|
unrar
|
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-12942
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256397
|
9.8 |
CRITICAL
Network
|
rarlab
|
unrar
|
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-12941
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256398
|
9.8 |
CRITICAL
Network
|
rarlab
|
unrar
|
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-12940
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256399
|
9.8 |
CRITICAL
Network
|
unity3d
|
unity_editor
|
A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5.5.x before 5.5.4p3, 5.6.x before 5.6.3p1, and 2017.x before…
|
CWE-20
Improper Input Validation
|
CVE-2017-12939
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256400
|
7.5 |
HIGH
Network
|
rarlab
|
unrar
|
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
|
CWE-22
Path Traversal
|
CVE-2017-12938
|
2024-11-21 12:10 |
2017-08-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|