|
251371
|
9.8 |
CRITICAL
Network
|
linux debian
|
linux_kernel debian_linux
|
The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lack certain checks for the end of a buffer, which allows remote attackers to trigger pointer-arithmetic errors or possi…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7895
|
2024-11-21 12:32 |
2017-04-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251372
|
7.8 |
HIGH
Local
|
privatetunnel
|
privatetunnel
|
Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long password.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-7720
|
2024-11-21 12:32 |
2017-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251373
|
6.1 |
MEDIUM
Network
|
wp-ecommerce
|
easy_wp_smtp
|
XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
|
CWE-79
Cross-site Scripting
|
CVE-2017-7723
|
2024-11-21 12:32 |
2017-04-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251374
|
8.8 |
HIGH
Network
|
dlink
|
dcs-2230l_firmware dcs-2310l_firmware dcs-2332l_firmware dcs-6010l_firmware dcs-7010l_firmware dcs-2530l_firmware dcs-930l_firmware dcs-932l_firmware dcs-934l_firmware dcs-…
|
D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the device's settings via a CSRF attack. This is because of the …
|
CWE-352
Origin Validation Error
|
CVE-2017-7852
|
2024-11-21 12:32 |
2017-04-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251375
|
5.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-7718
|
2024-11-21 12:32 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251376
|
8.8 |
HIGH
Network
|
squirrelmail
|
squirrelmail
|
SquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication remote code execution via a sendmail.cf file that is mishandled in a popen call. It's possible to exploit …
|
CWE-20
Improper Input Validation
|
CVE-2017-7692
|
2024-11-21 12:32 |
2017-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251377
|
7.8 |
HIGH
Local
|
tenable
|
nessus
|
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due to insecure permissions when running in Agent Mode.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-7850
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251378
|
5.5 |
MEDIUM
Local
|
tenable
|
nessus
|
Nessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due to insecure permissions when running in Agent Mode.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-7849
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251379
|
6.1 |
MEDIUM
Network
|
mantisbt
|
mantisbt
|
A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remot…
|
CWE-79
Cross-site Scripting
|
CVE-2017-7897
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
251380
|
6.1 |
MEDIUM
Network
|
trendmicro
|
interscan_messaging_security_virtual_appliance
|
Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2017-7896
|
2024-11-21 12:32 |
2017-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|