|
247411
|
9.8 |
CRITICAL
Network
|
ocaml
|
ocaml
|
Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with raised privilege in binaries marked as setuid, by setting the CAML_CPLUGINS, CAML_N…
|
NVD-CWE-noinfo
|
CVE-2017-9772
|
2024-11-21 12:36 |
2017-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247412
|
9.8 |
CRITICAL
Network
|
vivotek
|
network_camera_ib8369_firmware network_camera_fd8164_firmware network_camera_fd816ba_firmware
|
'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell command injection, which allows remote attackers to execute any shell command as root …
|
CWE-78
OS Command
|
CVE-2017-9828
|
2024-11-21 12:36 |
2017-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247413
|
7.8 |
HIGH
Local
|
freedesktop debian redhat
|
poppler debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server…
|
Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) or possibly have unspe…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-9776
|
2024-11-21 12:36 |
2017-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247414
|
6.5 |
MEDIUM
Network
|
freedesktop debian redhat
|
poppler debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_aus enterprise_linux_server_eus enterprise_linux_server…
|
Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9775
|
2024-11-21 12:36 |
2017-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247415
|
9.8 |
CRITICAL
Network
|
ideablade
|
breeze.server.net
|
IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSON deserialization.
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2017-9424
|
2024-11-21 12:36 |
2017-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247416
|
6.5 |
MEDIUM
Network
|
libtiff canonical
|
libtiff ubuntu_linux
|
In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to cause a denial of service (memory leak within the function …
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-9815
|
2024-11-21 12:36 |
2017-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247417
|
9.8 |
CRITICAL
Network
|
openwebif_project
|
openwebif
|
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/controllers/models/config.py" performs an eval() call on the contents of the "key…
|
CWE-94
Code Injection
|
CVE-2017-9807
|
2024-11-21 12:36 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247418
|
5.5 |
MEDIUM
Local
|
jasper_project
|
jasper
|
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image, related to the jp2_decode function in libjasper/jp2/jp2_dec…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-9782
|
2024-11-21 12:36 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247419
|
6.1 |
MEDIUM
Network
|
check_mk_project
|
check_mk
|
A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote attacker to inject arbitrary HTML or JavaScript via the _username pa…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9781
|
2024-11-21 12:36 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247420
|
8.8 |
HIGH
Network
|
horde
|
horde_image_api
|
Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authentication.
|
CWE-94
Code Injection
|
CVE-2017-9774
|
2024-11-21 12:36 |
2017-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|