|
257551
|
9.8 |
CRITICAL
Network
|
linux
canonical
|
linux_kernel
ubuntu_linux
|
In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-12762
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257552
|
7.2 |
HIGH
Network
|
extplorer
|
extplorer
|
Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.
|
CWE-77
Command Injection
|
CVE-2017-12756
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257553
|
8.8 |
HIGH
Network
|
asuswrt-merlin
|
asuswrt-merlin
|
Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-A…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-12754
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257554
|
8.8 |
HIGH
Network
|
taglib
debian
|
taglib
debian_linux
|
In TagLib 1.11.1, the rebuildAggregateFrames function in id3v2framefactory.cpp has a pointer to cast vulnerability, which allows remote attackers to cause a denial of service or possibly have unspeci…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2017-12678
|
2024-11-21 12:10 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257555
|
6.1 |
MEDIUM
Network
|
identityserver
|
identityserver3
|
IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the Iden…
|
CWE-79
Cross-site Scripting
|
CVE-2017-12677
|
2024-11-21 12:10 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257556
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.
|
CWE-20
CWE-772
Improper Input Validation
Missing Release of Resource after Effective Lifetime
|
CVE-2017-12676
|
2024-11-21 12:10 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257557
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadImage in MagickCore/constitute.c, which allows attackers to c…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-12675
|
2024-11-21 12:10 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257558
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service.
|
CWE-834
Excessive Iteration
|
CVE-2017-12674
|
2024-11-21 12:10 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257559
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cause a denial of service.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-12673
|
2024-11-21 12:10 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
257560
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-12672
|
2024-11-21 12:10 |
2017-08-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
