|
250021
|
7.8 |
HIGH
Local
|
qcacld_2.0_project
|
qcacld_2.0
|
While parsing Netlink attributes in QCA_WLAN_VENDOR_ATTR_EXTSCAN_BSSID_HOTLIST_PARAMS_LOST_AP_SAMPLE_SIZE in qcacld 2.0 before 2017-05-16, a buffer overread could occur.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9694
|
2024-11-21 12:36 |
2018-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250022
|
5.5 |
MEDIUM
Local
|
google
|
android
|
The length of attribute value for STA_EXT_CAPABILITY in __wlan_hdd_change_station in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-06 being less than the actual lenth of StaPara…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-9693
|
2024-11-21 12:36 |
2018-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250023
|
7.8 |
HIGH
Local
|
google
|
android
|
When an atomic commit is issued on a writeback panel with a NULL output_layer parameter in Android for MSM, Firefox OS for MSM, and QRD Android before 2017-06-03, a NULL pointer dereference may poten…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-9692
|
2024-11-21 12:36 |
2018-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250024
|
4.7 |
MEDIUM
Local
|
google
|
android
|
There is a race condition in Android for MSM, Firefox OS for MSM, and QRD Android that allows to access to already free'd memory in the debug message output functionality contained within the mobicor…
|
CWE-362
Race Condition
|
CVE-2017-9691
|
2024-11-21 12:36 |
2018-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250025
|
6.5 |
MEDIUM
Network
|
google
|
android
|
In Android before 2017-08-05 on Qualcomm MSM, Firefox OS for MSM, QRD Android, and all Android releases from CAF using the Linux kernel, if kernel memory address is passed from userspace through iris…
|
CWE-200
Information Exposure
|
CVE-2017-9681
|
2024-11-21 12:36 |
2018-03-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250026
|
6.1 |
MEDIUM
Network
|
projectsend
|
projectsend
|
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the D…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9786
|
2024-11-21 12:36 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250027
|
6.1 |
MEDIUM
Network
|
projectsend
|
projectsend
|
Cross-site scripting (XSS) vulnerability in ProjectSend (formerly cFTP) before commit 6c3710430be26feb5371cb0377e5355d6f9a27ca allows remote attackers to inject arbitrary web script or HTML via the D…
|
CWE-79
Cross-site Scripting
|
CVE-2017-9783
|
2024-11-21 12:36 |
2018-03-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250028
|
7.5 |
HIGH
Network
|
parallels
|
remote_application_server
|
In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource under the "RASHTML5Ga…
|
CWE-22
Path Traversal
|
CVE-2017-9447
|
2024-11-21 12:36 |
2018-03-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250029
|
9.8 |
CRITICAL
Network
|
facetag_project
|
facetag
|
ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action.
|
CWE-89
SQL Injection
|
CVE-2017-9426
|
2024-11-21 12:36 |
2018-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250030
|
6.1 |
MEDIUM
Network
|
facetag_project
|
facetag
|
The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action.
|
CWE-79
Cross-site Scripting
|
CVE-2017-9425
|
2024-11-21 12:36 |
2018-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|