|
250021
|
6.1 |
MEDIUM
Network
|
fenix_hosting
|
fenix-open-source
|
FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic parameter).
|
CWE-79
Cross-site Scripting
|
CVE-2017-6479
|
2024-11-21 12:29 |
2017-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250022
|
6.1 |
MEDIUM
Network
|
mangoswebv4_project
|
mangoswebv4
|
paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
|
CWE-79
Cross-site Scripting
|
CVE-2017-6478
|
2024-11-21 12:29 |
2017-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250023
|
8.1 |
HIGH
Network
|
openelec
|
openelec
|
The auto-update feature of Open Embedded Linux Entertainment Center (OpenELEC) 6.0.3, 7.0.1, and 8.0.4 uses neither encrypted connections nor signed updates. A man-in-the-middle attacker could manipu…
|
CWE-347 CWE-311
Improper Verification of Cryptographic Signature Missing Encryption of Sensitive Data
|
CVE-2017-6445
|
2024-11-21 12:29 |
2017-03-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250024
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record …
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2017-6474
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250025
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between l…
|
CWE-20
Improper Input Validation
|
CVE-2017-6473
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250026
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an RTMPT dissector infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-rtm…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2017-6472
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250027
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validat…
|
CWE-20
Improper Input Validation
|
CVE-2017-6471
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250028
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by cons…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2017-6470
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250029
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an LDSS dissector crash, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-ldss.c by en…
|
CWE-20
Improper Input Validation
|
CVE-2017-6469
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250030
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationshi…
|
CWE-20
Improper Input Validation
|
CVE-2017-6468
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|