|
248931
|
5.5 |
MEDIUM
Local
|
imagemagick
|
imagemagick
|
The ReadPCXImage function in coders/pcx.c in ImageMagick 7.0.4.9 allows remote attackers to cause a denial of service (attempted large memory allocation and application crash) via a crafted file. NOT…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7275
|
2024-11-21 12:31 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248932
|
5.5 |
MEDIUM
Local
|
radare
|
radare2
|
The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PE file.
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-7274
|
2024-11-21 12:31 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248933
|
6.6 |
MEDIUM
Physics
|
linux
|
linux_kernel
|
The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possib…
|
NVD-CWE-Other
|
CVE-2017-7273
|
2024-11-21 12:31 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248934
|
7.4 |
HIGH
Network
|
php
|
php
|
PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is constrained. Because a :port syntax is r…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-7272
|
2024-11-21 12:31 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248935
|
6.1 |
MEDIUM
Network
|
yii_software
|
yii
|
Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request da…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7271
|
2024-11-21 12:31 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248936
|
9.8 |
CRITICAL
Network
|
irssi
|
irssi
|
The netjoin processing in Irssi 1.x before 1.0.2 allows attackers to cause a denial of service (use-after-free) and possibly execute arbitrary code via unspecified vectors.
|
CWE-416
Use After Free
|
CVE-2017-7191
|
2024-11-21 12:31 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248937
|
7.5 |
HIGH
Network
|
extraputty
|
extraputty
|
The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service (crash) via a large (1) read or (2) write TFTP protocol message.
|
CWE-20
Improper Input Validation
|
CVE-2017-7183
|
2024-11-21 12:31 |
2017-03-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248938
|
6.1 |
MEDIUM
Network
|
netflix
|
security_monkey
|
Netflix Security Monkey before 0.8.0 has an Open Redirect. The logout functionality accepted the "next" parameter which then redirects to any domain irrespective of the Host header.
|
CWE-601
Open Redirect
|
CVE-2017-7266
|
2024-11-21 12:31 |
2017-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248939
|
7.8 |
HIGH
Local
|
artifex
|
mupdf
|
Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unsp…
|
CWE-416
Use After Free
|
CVE-2017-7264
|
2024-11-21 12:31 |
2017-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248940
|
7.8 |
HIGH
Local
|
potrace_project
|
potrace
|
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-7263
|
2024-11-21 12:31 |
2017-03-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|