|
255401
|
6.5 |
MEDIUM
Network
|
graphicsmagick debian
|
graphicsmagick debian_linux
|
ReadPNMImage in coders/pnm.c in GraphicsMagick 1.3.26 does not ensure the correct number of colors for the XV 332 format, leading to a NULL Pointer Dereference.
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-14504
|
2024-11-21 12:12 |
2017-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255402
|
9.8 |
CRITICAL
Network
|
iball
|
ib-wra150n_firmware
|
An authentication bypass vulnerability on iBall Baton ADSL2+ Home Router FW_iB-LR7011A_1.0.2 devices potentially allows attackers to directly access administrative router settings by crafting URLs wi…
|
CWE-425
Direct Request ('Forced Browsing')
|
CVE-2017-14244
|
2024-11-21 12:12 |
2017-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255403
|
9.8 |
CRITICAL
Network
|
utstar
|
wa3002g4_firmware
|
An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials fr…
|
CWE-287
Improper Authentication
|
CVE-2017-14243
|
2024-11-21 12:12 |
2017-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255404
|
6.5 |
MEDIUM
Network
|
libarchive
|
libarchive
|
libarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in archive_read_support_format_lha.c when extracting a specially crafted lha archive, related to lha_crc16.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-14503
|
2024-11-21 12:12 |
2017-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255405
|
7.5 |
HIGH
Network
|
libarchive
|
libarchive
|
read_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one error for UTF-16 names in RAR archives, leading to an out-of-bounds read in archive_read_format_rar_rea…
|
CWE-125 CWE-193
Out-of-bounds Read Off-by-one Error
|
CVE-2017-14502
|
2024-11-21 12:12 |
2017-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255406
|
6.5 |
MEDIUM
Network
|
libarchive
|
libarchive
|
An out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in libarchive 3.3.2 when extracting a specially crafted iso9660 iso file, related to archive_read_format_…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-14501
|
2024-11-21 12:12 |
2017-09-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255407
|
8.8 |
HIGH
Network
|
newsbeuter
|
newsbeuter
|
Improper Neutralization of Special Elements used in an OS Command in the podcast playback function of Podbeuter in Newsbeuter 0.3 through 2.9 allows remote attackers to perform user-assisted code exe…
|
CWE-78
OS Command
|
CVE-2017-14500
|
2024-11-21 12:12 |
2017-09-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255408
|
6.1 |
MEDIUM
Network
|
silverstripe
|
silverstripe
|
SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an admin/assets/add pathname, as demonstrated by the admin/pag…
|
CWE-79
Cross-site Scripting
|
CVE-2017-14498
|
2024-11-21 12:12 |
2017-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255409
|
7.8 |
HIGH
Local
|
linux debian
|
linux_kernel debian_linux
|
The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to cause a denial of service (buffer overflow, and disk and m…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-14497
|
2024-11-21 12:12 |
2017-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255410
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime device, which allows local users to cause a denial of service …
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-14340
|
2024-11-21 12:12 |
2017-09-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|