|
250631
|
6.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) o…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-5667
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250632
|
7.4 |
HIGH
Network
|
apache
|
camel
|
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-5643
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250633
|
7.4 |
HIGH
Network
|
debian kitfox
|
debian_linux svg_salamander
|
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG fil…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-5617
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250634
|
6.5 |
MEDIUM
Local
|
virglrenderer_project
|
virglrenderer
|
The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-5937
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250635
|
5.5 |
MEDIUM
Local
|
qemu suse
|
qemu linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop linux_enterprise_server_for_sap
|
Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-5898
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250636
|
5.5 |
MEDIUM
Local
|
fedoraproject netpbm_project
|
fedora netpbm
|
tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff…
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2017-5849
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250637
|
9.8 |
CRITICAL
Network
|
fatek
|
ethernet_module_configuration_tool_cbe_firmware ethernet_module_configuration_tool_cbeh_firmware ethernet_module_configuration_tool_cm25e_firmware ethernet_module_configuration_tool_cm55e_fi…
|
An issue was discovered in Fatek Automation PLC Ethernet Module. The affected Ether_cfg software configuration tool runs on the following Fatek PLCs: CBEH versions prior to V3.6 Build 170215, CBE ver…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6023
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250638
|
5.5 |
MEDIUM
Local
|
virglrenderer_project
|
virglrenderer
|
Heap-based buffer overflow in the vrend_create_vertex_elements_state function in vrend_renderer.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (out-of-bounds…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-5994
|
2024-11-21 12:28 |
2017-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250639
|
6.5 |
MEDIUM
Local
|
virglrenderer_project
|
virglrenderer
|
Memory leak in the vrend_renderer_init_blit_ctx function in vrend_blitter.c in virglrenderer before 0.6.0 allows local guest OS users to cause a denial of service (host memory consumption) via a larg…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-5993
|
2024-11-21 12:28 |
2017-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250640
|
6.1 |
MEDIUM
Network
|
debian opensuse_project opensuse viewvc
|
debian_linux leap viewvc
|
Cross-site scripting (XSS) vulnerability in the nav_path function in lib/viewvc.py in ViewVC before 1.0.14 and 1.1.x before 1.1.26 allows remote attackers to inject arbitrary web script or HTML via t…
|
CWE-79
Cross-site Scripting
|
CVE-2017-5938
|
2024-11-21 12:28 |
2017-03-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|