|
250231
|
7.5 |
HIGH
Network
|
wireshark debian
|
wireshark debian_linux
|
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restr…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2017-6467
|
2024-11-21 12:29 |
2017-03-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250232
|
7.5 |
HIGH
Network
|
zen_mobile_app_native_project
|
zen_mobile_app_native
|
Remote file upload vulnerability in Wordpress Plugin Mobile App Native 3.0.
|
CWE-287 CWE-434 CWE-732
Improper Authentication Unrestricted Upload of File with Dangerous Type Incorrect Permission Assignment for Critical Resource
|
CVE-2017-6104
|
2024-11-21 12:29 |
2017-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250233
|
6.1 |
MEDIUM
Network
|
anyvar_project
|
anyvar
|
Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1.
|
CWE-79
Cross-site Scripting
|
CVE-2017-6103
|
2024-11-21 12:29 |
2017-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250234
|
6.1 |
MEDIUM
Network
|
rockhoist_badges_project
|
rockhoist_badges_plugin
|
Persistent XSS in wordpress plugin rockhoist-badges v1.2.2.
|
CWE-79
Cross-site Scripting
|
CVE-2017-6102
|
2024-11-21 12:29 |
2017-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250235
|
8.6 |
HIGH
Network
|
openidc
|
mod_auth_openidc
|
The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "Aut…
|
CWE-287
Improper Authentication
|
CVE-2017-6413
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250236
|
5.5 |
MEDIUM
Local
|
kde
|
kdelibs kio
|
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string,…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2017-6410
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250237
|
9.8 |
CRITICAL
Network
|
veritas
|
netbackup_appliance netbackup
|
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-6409
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250238
|
7.0 |
HIGH
Local
|
veritas
|
netbackup_appliance netbackup
|
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects …
|
CWE-362
Race Condition
|
CVE-2017-6408
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250239
|
8.8 |
HIGH
Local
|
veritas
|
netbackup_appliance netbackup
|
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client…
|
NVD-CWE-noinfo
|
CVE-2017-6407
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250240
|
8.8 |
HIGH
Local
|
veritas
|
netbackup_appliance netbackup access
|
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occ…
|
NVD-CWE-noinfo
|
CVE-2017-6406
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|