|
256051
|
6.1 |
MEDIUM
Network
|
finecms_project
|
finecms
|
controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.
|
CWE-79
Cross-site Scripting
|
CVE-2017-13697
|
2024-11-21 12:11 |
2017-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256052
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain …
|
CWE-200
Information Exposure
|
CVE-2017-13695
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256053
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not flush the node and node_ext caches and causes a kernel stack dump, which allows …
|
CWE-200
Information Exposure
|
CVE-2017-13694
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256054
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache and causes a kernel stack dump, which allows local users to…
|
CWE-200
Information Exposure
|
CVE-2017-13693
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256055
|
7.5 |
HIGH
Network
|
htacg
|
tidy
|
In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated by an invalid ISALNUM argument.
|
CWE-20
Improper Input Validation
|
CVE-2017-13692
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256056
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
net/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi field when RTM_F_FIB_MATCH is set, which allows local users to cause a denial of service (NULL pointe…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-13686
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256057
|
6.1 |
MEDIUM
Network
|
misp
|
misp
|
app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisati…
|
CWE-79
Cross-site Scripting
|
CVE-2017-13671
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256058
|
9.8 |
CRITICAL
Network
|
nexusphp
|
nexusphp
|
SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.
|
CWE-89
SQL Injection
|
CVE-2017-13669
|
2024-11-21 12:11 |
2017-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256059
|
5.5 |
MEDIUM
Local
|
multicorewareinc
|
x265
|
An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.5, as used in libbpg and other products. A small height value can…
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2017-13666
|
2024-11-21 12:11 |
2017-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
256060
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the ReadMATImage function in coders/mat.c, leading to a denial of service (assertion failure and application exi…
|
CWE-617
Reachable Assertion
|
CVE-2017-13658
|
2024-11-21 12:11 |
2017-08-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|