|
247441
|
5.5 |
MEDIUM
Local
|
apng_disassembler_project
|
apng_disassembler
|
Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted image containing a malformed image size descriptor in…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6193
|
2024-11-21 12:29 |
2018-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247442
|
5.5 |
MEDIUM
Local
|
apng_disassembler_project
|
apng_disassembler
|
Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute arbitrary code via a crafted image containing a malformed chunk size descriptor.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6192
|
2024-11-21 12:29 |
2018-02-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247443
|
8.8 |
HIGH
Network
|
ruckuswireless
|
solo_access_point_firmware smartzone_managed_access_point_firmware
|
Ruckus Networks Solo APs firmware releases R110.x or before and Ruckus Networks SZ managed APs firmware releases R5.x or before contain authenticated Root Command Injection in the web-GUI that could …
|
CWE-78
OS Command
|
CVE-2017-6230
|
2024-11-21 12:29 |
2018-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247444
|
8.8 |
HIGH
Network
|
ruckuswireless
|
r500_firmware r600_firmware r310_firmware h320_firmware h510_firmware r710_firmware r720_firmware t300_firmware t301_firmware t300e_firmware t610_firmware t710_firmwa…
|
Ruckus Networks Unleashed AP firmware releases before 200.6.10.1.x and Ruckus Networks Zone Director firmware releases 10.1.0.0.x, 9.10.2.0.x, 9.12.3.0.x, 9.13.3.0.x, 10.0.1.0.x or before contain aut…
|
CWE-78
OS Command
|
CVE-2017-6229
|
2024-11-21 12:29 |
2018-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247445
|
6.5 |
MEDIUM
Adjacent
|
brocade broadcom
|
fabric_os fabric_operating_system
|
A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allow an attacker to cause a denial of service (C…
|
NVD-CWE-noinfo
|
CVE-2017-6227
|
2024-11-21 12:29 |
2018-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247446
|
6.1 |
MEDIUM
Network
|
brocade broadcom
|
fabric_os fabric_operating_system
|
Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before 7.4.2b, 8.1.2 and 8.2.0 could allo…
|
CWE-79
Cross-site Scripting
|
CVE-2017-6225
|
2024-11-21 12:29 |
2018-02-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247447
|
8.1 |
HIGH
Network
|
sandstorm
|
sandstorm
|
A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by providing a URL. It could bypass access cont…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-6201
|
2024-11-21 12:29 |
2018-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247448
|
6.5 |
MEDIUM
Network
|
sandstorm
|
sandstorm
|
Sandstorm before build 0.203 allows remote attackers to read any specified file under /etc or /run via the sandbox backup function. The root cause is that the findFilesToZip function doesn't filter L…
|
CWE-200
Information Exposure
|
CVE-2017-6200
|
2024-11-21 12:29 |
2018-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247449
|
9.8 |
CRITICAL
Network
|
sandstorm
|
sandstorm
|
A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field.
|
CWE-287
Improper Authentication
|
CVE-2017-6199
|
2024-11-21 12:29 |
2018-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247450
|
6.5 |
MEDIUM
Network
|
sandstorm
|
sandstorm
|
The Supervisor in Sandstorm doesn't set and enforce the resource limits of a process. This allows remote attackers to cause a denial of service by launching a fork bomb in the sandbox, or by using a …
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-6198
|
2024-11-21 12:29 |
2018-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|