|
258301
|
8.8 |
HIGH
Network
|
rtsindia
|
rwr-3g-100_firmware
|
The RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that forces an end user to execute unwanted actions on a web application in which they're currently authentic…
|
CWE-352
Origin Validation Error
|
CVE-2017-12853
|
2024-11-21 12:10 |
2017-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258302
|
8.8 |
HIGH
Network
|
kanboard
|
kanboard
|
An authenticated standard user could reset the password of the admin by altering form data. Affects kanboard before 1.0.46.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2017-12851
|
2024-11-21 12:10 |
2017-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258303
|
8.8 |
HIGH
Network
|
kanboard
|
kanboard
|
An authenticated standard user could reset the password of other users (including the admin) by altering form data. Affects kanboard before 1.0.46.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2017-12850
|
2024-11-21 12:10 |
2017-08-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258304
|
7.8 |
HIGH
Local
|
gnu
|
binutils
|
The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-12799
|
2024-11-21 12:10 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258305
|
6.1 |
MEDIUM
Network
|
nexusphp_project
|
nexusphp
|
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.
|
CWE-79
Cross-site Scripting
|
CVE-2017-12798
|
2024-11-21 12:10 |
2017-08-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258306
|
6.1 |
MEDIUM
Network
|
nexusphp_project
|
nexusphp
|
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via some parameter to usersearch.php.
|
CWE-79
Cross-site Scripting
|
CVE-2017-12777
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258307
|
9.8 |
CRITICAL
Network
|
finecms_project
|
finecms
|
finecms in 1.9.5\controllers\member\ContentController.php allows remote attackers to operate website database
|
CWE-89
SQL Injection
|
CVE-2017-12774
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258308
|
9.8 |
CRITICAL
Network
|
linux canonical
|
linux_kernel ubuntu_linux
|
In /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow. This affects the Linux …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-12762
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258309
|
7.2 |
HIGH
Network
|
extplorer
|
extplorer
|
Command inject in transfer from another server in extplorer 2.1.9 and prior allows attacker to inject command via the userfile[0] parameter.
|
CWE-77
Command Injection
|
CVE-2017-12756
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
258310
|
8.8 |
HIGH
Network
|
asuswrt-merlin
|
asuswrt-merlin
|
Stack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS devices and ASUS firmware for ASUS RT-AC5300, RT_AC1900P, RT-AC68U, RT-AC68P, RT-AC88U, RT-AC66U, RT-A…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-12754
|
2024-11-21 12:10 |
2017-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|