|
249901
|
7.5 |
HIGH
Network
|
ruby-lang
|
ruby
|
The parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression library, as used in Ruby 2.4.0, allows remote attackers to cause a denial of service (deep recursion a…
|
CWE-20
Improper Input Validation
|
CVE-2017-6181
|
2024-11-21 12:29 |
2017-04-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249902
|
8.1 |
HIGH
Network
|
sophos
|
web_appliance
|
In Sophos Web Appliance (SWA) before 4.3.1.2, Session Fixation could occur, aka NSWA-1310.
|
CWE-384
Session Fixation
|
CVE-2017-6412
|
2024-11-21 12:29 |
2017-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249903
|
4.7 |
MEDIUM
Network
|
sophos
|
web_appliance
|
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via the token parameter, aka NSWA-1303.
|
CWE-77
Command Injection
|
CVE-2017-6184
|
2024-11-21 12:29 |
2017-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249904
|
7.2 |
HIGH
Network
|
sophos
|
web_appliance
|
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's configuration utilities for adding (and detecting) Active Directory servers was vulnerable to remote command injection, aka NS…
|
CWE-77
Command Injection
|
CVE-2017-6183
|
2024-11-21 12:29 |
2017-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249905
|
9.8 |
CRITICAL
Network
|
sophos
|
web_appliance
|
In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injection via functions, aka NSWA-1304.
|
CWE-78
OS Command
|
CVE-2017-6182
|
2024-11-21 12:29 |
2017-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249906
|
9.8 |
CRITICAL
Network
|
putty opensuse_project opensuse
|
putty leap
|
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6542
|
2024-11-21 12:29 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249907
|
6.5 |
MEDIUM
Network
|
ntp
|
ntp
|
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote attackers to cause a denial of service (ntpd crash) via a malformed mode configuration directive.
|
CWE-20
Improper Input Validation
|
CVE-2017-6464
|
2024-11-21 12:29 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249908
|
6.5 |
MEDIUM
Network
|
ntp
|
ntp
|
NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote authenticated users to cause a denial of service (daemon crash) via an invalid setting in a :config directive, related to the unpeer option.
|
CWE-20
Improper Input Validation
|
CVE-2017-6463
|
2024-11-21 12:29 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249909
|
7.8 |
HIGH
Local
|
ntp
|
ntp
|
Buffer overflow in the legacy Datum Programmable Time Server (DPTS) refclock driver in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows local users to have unspecified impact via a crafted /dev/dat…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6462
|
2024-11-21 12:29 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249910
|
8.8 |
HIGH
Network
|
ntp
|
ntp
|
Stack-based buffer overflow in the reslist function in ntpq in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allows remote servers have unspecified impact via a long flagstr variable in a restriction l…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6460
|
2024-11-21 12:29 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|