|
264201
|
7.8 |
HIGH
Local
|
miniupnp_project
|
miniupnpd
|
Uninitialized stack variable vulnerability in NameValueParserEndElt (upnpreplyparse.c) in miniupnpd < 2.0 allows an attacker to cause Denial of Service (Segmentation fault and Memory Corruption) or p…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-1000494
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264202
|
9.8 |
CRITICAL
Network
|
rocket.chat
|
rocket.chat
|
Rocket.Chat Server version 0.59 and prior is vulnerable to a NoSQL injection leading to administrator account takeover
|
CWE-74
Injection
|
CVE-2017-1000493
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264203
|
6.1 |
MEDIUM
Network
|
leanote
|
desktop
|
Leanote-desktop version v2.5 is vulnerable to a XSS which leads to code execution due to enabled node integration
|
CWE-79
Cross-site Scripting
|
CVE-2017-1000492
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264204
|
6.1 |
MEDIUM
Network
|
shiba_project
|
shiba
|
Shiba markdown live preview app version 1.1.0 is vulnerable to XSS which leads to code execution due to enabled node integration.
|
CWE-79
Cross-site Scripting
|
CVE-2017-1000491
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264205
|
5.4 |
MEDIUM
Network
|
invoiceninja
|
invoice_ninja
|
Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.
|
CWE-79
Cross-site Scripting
|
CVE-2017-1000466
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264206
|
5.4 |
MEDIUM
Network
|
leafpub
|
leafpub
|
Leafpub version 1.2.0-beta6 is vulnerable to stored cross-site scripting vulnerability, within the edit blog post page, which can result in disruption of service and execution of javascript code.
|
CWE-79
Cross-site Scripting
|
CVE-2017-1000463
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264207
|
6.1 |
MEDIUM
Network
|
leanote
|
leanote
|
Leanote version <= 2.5 is vulnerable to XSS due to not sanitized input in markdown notes
|
CWE-79
Cross-site Scripting
|
CVE-2017-1000459
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264208
|
8.3 |
HIGH
Network
|
openmicroscopy
|
omero
|
In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.
|
NVD-CWE-noinfo
|
CVE-2017-1000438
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264209
|
9.8 |
CRITICAL
Network
|
creolabs
|
gravity
|
Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-1000437
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
264210
|
6.1 |
MEDIUM
Network
|
furikake_project
|
furikake
|
Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to an attacker controlled page classes/Furigana.php: header('…
|
CWE-601
Open Redirect
|
CVE-2017-1000434
|
2024-11-21 12:04 |
2018-01-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|