|
248341
|
7.5 |
HIGH
Network
|
mozilla
|
network_security_services
|
Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of service by remote attacker.
|
-
|
CVE-2017-7502
|
2024-11-21 12:32 |
2017-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248342
|
8.8 |
HIGH
Network
|
moxa
|
oncell_g3110-hspa_firmware oncell_g3110-hsdpa_firmware oncell_g3150-hsdpa_firmware oncell_5104-hsdpa_firmware oncell_5104-hspa_firmware oncell_5004-hspa_firmware
|
A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCe…
|
CWE-352
Origin Validation Error
|
CVE-2017-7917
|
2024-11-21 12:32 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248343
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3110-hspa_firmware oncell_g3110-hsdpa_firmware oncell_g3150-hsdpa_firmware oncell_5104-hsdpa_firmware oncell_5104-hspa_firmware oncell_5004-hspa_firmware
|
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 0912…
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2017-7915
|
2024-11-21 12:32 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248344
|
9.8 |
CRITICAL
Network
|
moxa
|
oncell_g3110-hspa_firmware oncell_g3110-hsdpa_firmware oncell_g3150-hsdpa_firmware oncell_5104-hsdpa_firmware oncell_5104-hspa_firmware oncell_5004-hspa_firmware
|
A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions,…
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2017-7913
|
2024-11-21 12:32 |
2017-05-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248345
|
7.5 |
HIGH
Network
|
fortinet
|
fortiportal
|
A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out information disclosure via the Forgotten Password feature.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2017-7731
|
2024-11-21 12:32 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248346
|
8.8 |
HIGH
Network
|
theforeman
|
foreman
|
Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management permission who are assigned to some organization(s) can do all operations granted b…
|
CWE-269
Improper Privilege Management
|
CVE-2017-7505
|
2024-11-21 12:32 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248347
|
6.5 |
MEDIUM
Network
|
mantisbt
|
mantisbt
|
MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2.4.1 omits a backslash check in string_api.php and consequently has conflicting interpretations of an initial \/ substring as introducing e…
|
CWE-352
Origin Validation Error
|
CVE-2017-7620
|
2024-11-21 12:32 |
2017-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248348
|
9.8 |
CRITICAL
Network
|
redhat
|
jboss_enterprise_application_platform
|
HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server <= Jboss 4.X does not restrict the classes fo…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2017-7504
|
2024-11-21 12:32 |
2017-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248349
|
7.5 |
HIGH
Network
|
phoenix_contact_gmbh
|
mguard_firmware
|
A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2. An attacker may compromise the device's availability by performing multiple initial VPN req…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-7935
|
2024-11-21 12:32 |
2017-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248350
|
6.6 |
MEDIUM
Local
|
schneider-electric
|
wonderware_historian_client
|
An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser (with improper restriction of XM…
|
CWE-611
XXE
|
CVE-2017-7907
|
2024-11-21 12:32 |
2017-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|