|
248461
|
7.8 |
HIGH
Local
|
privatetunnel
|
privatetunnel
|
Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7720
|
2024-11-21 12:32 |
2017-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248462
|
6.1 |
MEDIUM
Network
|
wp-ecommerce
|
easy_wp_smtp
|
XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
|
CWE-79
Cross-site Scripting
|
CVE-2017-7723
|
2024-11-21 12:32 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248463
|
8.8 |
HIGH
Network
|
dlink
|
dcs-2230l_firmware
dcs-2310l_firmware
dcs-2332l_firmware
dcs-6010l_firmware
dcs-7010l_firmware
dcs-2530l_firmware
dcs-930l_firmware
dcs-932l_firmware
dcs-934l_firmware
dcs-…
|
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the …
|
CWE-352
Origin Validation Error
|
CVE-2017-7852
|
2024-11-21 12:32 |
2017-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248464
|
5.5 |
MEDIUM
Local
|
qemu
debian
|
qemu
debian_linux
|
hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-7718
|
2024-11-21 12:32 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248465
|
8.8 |
HIGH
Network
|
squirrelmail
|
squirrelmail
|
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit …
|
CWE-20
Improper Input Validation
|
CVE-2017-7692
|
2024-11-21 12:32 |
2017-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248466
|
7.8 |
HIGH
Local
|
tenable
|
nessus
|
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-7850
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248467
|
5.5 |
MEDIUM
Local
|
tenable
|
nessus
|
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-7849
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248468
|
6.1 |
MEDIUM
Network
|
mantisbt
|
mantisbt
|
A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remot…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7897
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248469
|
6.1 |
MEDIUM
Network
|
trendmicro
|
interscan_messaging_security_virtual_appliance
|
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2017-7896
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248470
|
7.5 |
HIGH
Network
|
linux
debian
canonical
|
linux_kernel
debian_linux
ubuntu_linux
|
The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c,…
|
CWE-20
Improper Input Validation
|
CVE-2017-7645
|
2024-11-21 12:32 |
2017-04-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
