|
248371
|
7.8 |
HIGH
Local
|
irfanview
|
irfanview
fpx
|
IrfanView version 4.44 (32bit) with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix (.FPX) file.
|
CWE-20
Improper Input Validation
|
CVE-2017-7721
|
2024-11-21 12:32 |
2017-05-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248372
|
6.5 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticated users to obtain sensitive information by leveraging inco…
|
CWE-200
Information Exposure
|
CVE-2017-7644
|
2024-11-21 12:32 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248373
|
9.8 |
CRITICAL
Network
|
linux
debian
|
linux_kernel
debian_linux
|
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possi…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7895
|
2024-11-21 12:32 |
2017-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248374
|
7.8 |
HIGH
Local
|
privatetunnel
|
privatetunnel
|
Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7720
|
2024-11-21 12:32 |
2017-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248375
|
6.1 |
MEDIUM
Network
|
wp-ecommerce
|
easy_wp_smtp
|
XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
|
CWE-79
Cross-site Scripting
|
CVE-2017-7723
|
2024-11-21 12:32 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248376
|
8.8 |
HIGH
Network
|
dlink
|
dcs-2230l_firmware
dcs-2310l_firmware
dcs-2332l_firmware
dcs-6010l_firmware
dcs-7010l_firmware
dcs-2530l_firmware
dcs-930l_firmware
dcs-932l_firmware
dcs-934l_firmware
dcs-…
|
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the …
|
CWE-352
Origin Validation Error
|
CVE-2017-7852
|
2024-11-21 12:32 |
2017-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248377
|
5.5 |
MEDIUM
Local
|
qemu
debian
|
qemu
debian_linux
|
hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-7718
|
2024-11-21 12:32 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248378
|
8.8 |
HIGH
Network
|
squirrelmail
|
squirrelmail
|
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit …
|
CWE-20
Improper Input Validation
|
CVE-2017-7692
|
2024-11-21 12:32 |
2017-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248379
|
7.8 |
HIGH
Local
|
tenable
|
nessus
|
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-7850
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248380
|
5.5 |
MEDIUM
Local
|
tenable
|
nessus
|
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-7849
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
