|
251171
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KEY_REQKEY_DEFL_THREAD_KEYRING keyctl_set_reqkey_keyring cal…
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2017-7472
|
2024-11-21 12:31 |
2017-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251172
|
9.1 |
CRITICAL
Network
|
vaultive
|
office_365_security
|
PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol="application/pgp-…
|
CWE-326
Inadequate Encryption Strength
|
CVE-2017-7229
|
2024-11-21 12:31 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251173
|
9.8 |
CRITICAL
Network
|
novell netiq
|
imanager
|
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a webshell upload vulnerability.
|
NVD-CWE-noinfo
|
CVE-2017-7432
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251174
|
8.8 |
HIGH
Network
|
novell netiq
|
imanager
|
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have persistent CSRF in object management.
|
CWE-352
Origin Validation Error
|
CVE-2017-7431
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251175
|
6.1 |
MEDIUM
Network
|
novell netiq
|
imanager
|
Novell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a persistent XSS vulnerability in Framework.
|
CWE-79
Cross-site Scripting
|
CVE-2017-7430
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251176
|
5.3 |
MEDIUM
Network
|
netiq
|
imanager
|
NetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with Tomcat.
|
CWE-20
Improper Input Validation
|
CVE-2017-7428
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251177
|
9.8 |
CRITICAL
Network
|
gnulib
|
gnulib
|
Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_abbr function in time_rz.c.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7476
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251178
|
6.5 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via unspecified request parameters.
|
CWE-200
Information Exposure
|
CVE-2017-7216
|
2024-11-21 12:31 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251179
|
7.5 |
HIGH
Network
|
rxvt_project debian
|
rxvt debian_linux
|
Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invertible integer that eventually leads to a segfault due to …
|
CWE-125
Out-of-bounds Read
|
CVE-2017-7483
|
2024-11-21 12:31 |
2017-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251180
|
6.5 |
MEDIUM
Network
|
gfi
|
kerio_connect kerio_connect_client
|
Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjackin…
|
CWE-1021
Improper Restriction of Rendered UI Layers or Frames
|
CVE-2017-7440
|
2024-11-21 12:31 |
2017-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|