|
247211
|
7.3 |
HIGH
Local
|
infotecs
|
vipnet_client vipnet_coordinator
|
Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorr…
|
CWE-345 CWE-354 CWE-732
Insufficient Verification of Data Authenticity Improper Validation of Integrity Check Value Incorrect Permission Assignment for Critical Resource
|
CVE-2017-9606
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247212
|
6.1 |
MEDIUM
Network
|
epesi
|
epesi
|
Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data.
|
CWE-79
Cross-site Scripting
|
CVE-2017-9624
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247213
|
6.1 |
MEDIUM
Network
|
epesi
|
epesi
|
Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data.
|
CWE-79
Cross-site Scripting
|
CVE-2017-9623
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247214
|
6.1 |
MEDIUM
Network
|
epesi
|
epesi
|
Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data.
|
CWE-79
Cross-site Scripting
|
CVE-2017-9622
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247215
|
6.1 |
MEDIUM
Network
|
epesi
|
epesi
|
Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script o…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9621
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247216
|
5.5 |
MEDIUM
Local
|
wireshark
|
wireshark
|
In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan/dissectors/packet-daap.c in the DAAP dissector.
|
CWE-674
Uncontrolled Recursion
|
CVE-2017-9617
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247217
|
5.5 |
MEDIUM
Local
|
wireshark
|
wireshark
|
In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/dissectors/file-mp4.c.
|
CWE-674
Uncontrolled Recursion
|
CVE-2017-9616
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247218
|
6.1 |
MEDIUM
Network
|
piwigo
|
piwigo
|
An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identificatio…
|
CWE-601
Open Redirect
|
CVE-2017-9464
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247219
|
6.5 |
MEDIUM
Network
|
piwigo
|
piwigo
|
The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context …
|
CWE-89
SQL Injection
|
CVE-2017-9463
|
2024-11-21 12:36 |
2017-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247220
|
5.3 |
MEDIUM
Network
|
haxx
|
curl
|
In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which protocol libcurl should attempt to use when given a URL witho…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9502
|
2024-11-21 12:36 |
2017-06-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|