|
249001
|
7.5 |
HIGH
Network
|
postgresql
|
postgresql
|
It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges…
|
CWE-200
Information Exposure
|
CVE-2017-7484
|
2024-11-21 12:31 |
2017-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249002
|
9.8 |
CRITICAL
Network
|
keycloak
|
keycloak-nodejs-auth-utils
|
It was found that the Keycloak Node.js adapter 2.5 - 3.0 did not handle invalid tokens correctly. An attacker could use this flaw to bypass authentication and gain access to restricted information, …
|
NVD-CWE-noinfo
|
CVE-2017-7474
|
2024-11-21 12:31 |
2017-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249003
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring cal…
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2017-7472
|
2024-11-21 12:31 |
2017-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249004
|
9.1 |
CRITICAL
Network
|
vaultive
|
office_365_security
|
PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2017-7229
|
2024-11-21 12:31 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249005
|
9.8 |
CRITICAL
Network
|
novell netiq
|
imanager
|
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.
|
NVD-CWE-noinfo
|
CVE-2017-7432
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249006
|
8.8 |
HIGH
Network
|
novell netiq
|
imanager
|
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
|
CWE-352
Origin Validation Error
|
CVE-2017-7431
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249007
|
6.1 |
MEDIUM
Network
|
novell netiq
|
imanager
|
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.
|
CWE-79
Cross-site Scripting
|
CVE-2017-7430
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249008
|
5.3 |
MEDIUM
Network
|
netiq
|
imanager
|
NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat.
|
CWE-20
Improper Input Validation
|
CVE-2017-7428
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249009
|
9.8 |
CRITICAL
Network
|
gnulib
|
gnulib
|
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7476
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249010
|
6.5 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters.
|
CWE-200
Information Exposure
|
CVE-2017-7216
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|