|
247801
|
9.8 |
CRITICAL
Network
|
canonical
|
juju
|
Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing privilege escalation by users on the system to root.
|
CWE-862
Missing Authorization
|
CVE-2017-9232
|
2024-11-21 12:35 |
2017-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247802
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too late in checking whether an overwrite of an skb data structure may occur, which allows local users to…
|
CWE-20
Improper Input Validation
|
CVE-2017-9242
|
2024-11-21 12:35 |
2017-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247803
|
6.5 |
MEDIUM
Network
|
exiv2 canonical
|
exiv2 ubuntu_linux
|
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns pValue_ to 0x0, and the value of pValue() is 0x0. TiffImageEntry::doWriteImage wi…
|
CWE-369
Divide By Zero
|
CVE-2017-9239
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247804
|
6.1 |
MEDIUM
Network
|
trendmicro
|
serverprotect
|
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) S44, (2) S5, (3…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9037
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247805
|
7.8 |
HIGH
Local
|
trendmicro
|
serverprotect
|
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.
|
CWE-862
Missing Authorization
|
CVE-2017-9036
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247806
|
7.4 |
HIGH
Network
|
trendmicro
|
serverprotect
|
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2017-9035
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247807
|
9.8 |
CRITICAL
Network
|
trendmicro
|
serverprotect
|
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate soft…
|
CWE-20
Improper Input Validation
|
CVE-2017-9034
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247808
|
8.8 |
HIGH
Network
|
trendmicro
|
serverprotect
|
Cross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update…
|
CWE-352
Origin Validation Error
|
CVE-2017-9033
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247809
|
6.1 |
MEDIUM
Network
|
trendmicro
|
serverprotect
|
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the (1) T1 or (2) tmLas…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9032
|
2024-11-21 12:35 |
2017-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247810
|
7.5 |
HIGH
Network
|
bitcoin
|
bitcoin
|
The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initial 64-byte chunks followed by the same 16-byte chunk, multip…
|
CWE-338
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
|
CVE-2017-9230
|
2024-11-21 12:35 |
2017-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|