|
246991
|
6.1 |
MEDIUM
Network
|
trendmicro
|
serverprotect
|
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) S44, (2) S5, (3…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9037
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246992
|
7.8 |
HIGH
Local
|
trendmicro
|
serverprotect
|
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.
|
CWE-862
Missing Authorization
|
CVE-2017-9036
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246993
|
7.4 |
HIGH
Network
|
trendmicro
|
serverprotect
|
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2017-9035
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246994
|
9.8 |
CRITICAL
Network
|
trendmicro
|
serverprotect
|
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate soft…
|
CWE-20
Improper Input Validation
|
CVE-2017-9034
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246995
|
8.8 |
HIGH
Network
|
trendmicro
|
serverprotect
|
Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update…
|
CWE-352
Origin Validation Error
|
CVE-2017-9033
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246996
|
6.1 |
MEDIUM
Network
|
trendmicro
|
serverprotect
|
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) T1 or (2) tmLas…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9032
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246997
|
7.5 |
HIGH
Network
|
bitcoin
|
bitcoin
|
The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multip…
|
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
|
CVE-2017-9230
|
2024-11-21 12:35 |
2017-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246998
|
7.5 |
HIGH
Network
|
oniguruma_project ruby-lang php
|
oniguruma ruby php
|
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A SIGSEGV occurs in left_adjust_char_head() during regular expression com…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-9229
|
2024-11-21 12:35 |
2017-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246999
|
9.8 |
CRITICAL
Network
|
oniguruma_project php
|
oniguruma php
|
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in mbc_enc_len() during regular express…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-9227
|
2024-11-21 12:35 |
2017-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247000
|
9.8 |
CRITICAL
Network
|
oniguruma_project php
|
oniguruma php
|
An issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and mbstring in PHP through 7.1.5. A stack out-of-bounds read occurs in match_at() during regular expression…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-9224
|
2024-11-21 12:35 |
2017-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|