|
249321
|
7.5 |
HIGH
Network
|
miele_professional
|
pst10_webserver
|
An issue was discovered on Miele Professional PST10 devices. The corresponding embedded webserver "PST10 WebServer" typically listens to port 80 and is prone to a directory traversal attack; therefor…
|
CWE-22
Path Traversal
|
CVE-2017-7240
|
2024-11-21 12:31 |
2017-03-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249322
|
6.1 |
MEDIUM
Network
|
piengine
|
pi
|
A Cross-Site Scripting (XSS) was discovered in pi-engine/pi 2.5.0. The vulnerability exists due to insufficient filtration of user-supplied data (preview) passed to the "pi-develop/www/script/editor/…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7251
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249323
|
6.1 |
MEDIUM
Network
|
gazelle_project
|
gazelle
|
A Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data (action) passed to the 'Gazelle-master/sections…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7250
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249324
|
6.1 |
MEDIUM
Network
|
gazelle_project
|
gazelle
|
Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (action, userid) passed to the 'Gazell…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7249
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249325
|
6.1 |
MEDIUM
Network
|
gazelle_project
|
gazelle
|
A Cross-Site Scripting (XSS) was discovered in Gazelle before 2017-03-19. The vulnerability exists due to insufficient filtration of user-supplied data (type) passed to the 'Gazelle-master/sections/b…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7248
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249326
|
6.1 |
MEDIUM
Network
|
gazelle_project
|
gazelle
|
Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (torrents, size) passed to the 'Gazell…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7247
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249327
|
7.8 |
HIGH
Local
|
pcre
|
pcre
|
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 268) or possibly have unsp…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7246
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249328
|
7.8 |
HIGH
Local
|
pcre
|
pcre
|
Stack-based buffer overflow in the pcre32_copy_substring function in pcre_get.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (WRITE of size 4) or possibly have unspec…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7245
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249329
|
5.5 |
MEDIUM
Local
|
pcre
|
pcre
|
The _pcre32_xclass function in pcre_xclass.c in libpcre1 in PCRE 8.40 allows remote attackers to cause a denial of service (invalid memory read) via a crafted file.
|
CWE-125
Out-of-bounds Read
|
CVE-2017-7244
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249330
|
6.1 |
MEDIUM
Network
|
slims
|
slims7_cendana
|
Multiple Cross-Site Scripting (XSS) were discovered in admin/modules components in SLiMS 7 Cendana through 2017-03-23: the keywords parameter to bibliography/checkout_item.php, bibliography/dl_print.…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7242
|
2024-11-21 12:31 |
2017-03-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|