|
249351
|
6.1 |
MEDIUM
Network
|
slims
|
slims7_cendana
|
Multiple Cross-Site Scripting (XSS) were discovered in SLiMS 7 Cendana before 2017-03-16. The vulnerabilities exist due to insufficient filtration of user-supplied data (id) passed to the 'slims7_cen…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7202
|
2024-11-21 12:31 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249352
|
5.8 |
MEDIUM
Network
|
openstack
|
glance
|
An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked network port scans. With v1, it is possible t…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-7200
|
2024-11-21 12:31 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249353
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel through 4.10.4 allows local users to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact v…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7187
|
2024-11-21 12:31 |
2017-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249354
|
7.5 |
HIGH
Network
|
pcre
|
pcre2 pcre
|
libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation violation for read access, and application crash) by triggering an invalid Unicode …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7186
|
2024-11-21 12:31 |
2017-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249355
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
The xfrm_replay_verify_len function in net/xfrm/xfrm_user.c in the Linux kernel through 4.10.6 does not validate certain size data after an XFRM_MSG_NEWAE update, which allows local users to obtain r…
|
NVD-CWE-noinfo
|
CVE-2017-7184
|
2024-11-21 12:31 |
2017-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249356
|
8.8 |
HIGH
Network
|
deluge-torrent debian
|
deluge debian_linux
|
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) caus…
|
CWE-352
Origin Validation Error
|
CVE-2017-7178
|
2024-11-21 12:31 |
2017-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249357
|
7.5 |
HIGH
Network
|
openinfosecfoundation
|
suricata
|
Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
|
CWE-358
Improperly Implemented Security Check for Standard
|
CVE-2017-7177
|
2024-11-21 12:31 |
2017-03-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249358
|
9.8 |
CRITICAL
Network
|
chef_manage_project
|
chef_manage
|
The user-account creation feature in Chef Manage 2.1.0 through 2.4.4 allows remote attackers to execute arbitrary code. This is fixed in 2.4.5.
|
NVD-CWE-noinfo
|
CVE-2017-7174
|
2024-11-21 12:31 |
2017-03-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249359
|
7.8 |
HIGH
Local
|
flexera
|
flexnet_manager flexnet_manager_suite_2015
|
A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier (including FlexNet Manager Platform 9.2 and earlier) that affects the inventory gathering components and can be exploi…
|
CWE-269
Improper Privilege Management
|
CVE-2017-6894
|
2024-11-21 12:30 |
2023-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249360
|
9.8 |
CRITICAL
Network
|
riello-ups
|
netman_204_firmware
|
An issue was discovered in Riello NetMan 204 14-2 and 15-2. The issue is with the login script and wrongpass Python script used for authentication. When calling wrongpass, the variables $VAL0 and $VA…
|
CWE-255
Credentials Management
|
CVE-2017-6900
|
2024-11-21 12:30 |
2019-07-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|