|
252311
|
7.8 |
HIGH
Local
|
gnu
|
screen
|
GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions.
|
CWE-863
Incorrect Authorization
|
CVE-2017-5618
|
2024-11-21 12:28 |
2017-03-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252312
|
6.6 |
MEDIUM
Physics
|
oneplus
|
oxygenos
|
An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' i…
|
CWE-269
Improper Privilege Management
|
CVE-2017-5623
|
2024-11-21 12:28 |
2017-03-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252313
|
6.5 |
MEDIUM
Local
|
qemu
|
qemu
|
Memory leak in the virgl_cmd_resource_unref function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (host memory consumption) via …
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2017-5857
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252314
|
6.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via Meg…
|
CWE-401
Missing Release of Memory after Effective Lifetime
|
CVE-2017-5856
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252315
|
6.5 |
MEDIUM
Local
|
qemu debian
|
qemu debian_linux
|
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) o…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-5667
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252316
|
7.4 |
HIGH
Network
|
apache
|
camel
|
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-5643
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252317
|
7.4 |
HIGH
Network
|
debian kitfox
|
debian_linux svg_salamander
|
The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG fil…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2017-5617
|
2024-11-21 12:28 |
2017-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252318
|
6.5 |
MEDIUM
Local
|
virglrenderer_project
|
virglrenderer
|
The util_format_is_pure_uint function in vrend_renderer.c in Virgil 3d project (aka virglrenderer) 0.6.0 and earlier allows local guest OS users to cause a denial of service (NULL pointer dereference…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-5937
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252319
|
5.5 |
MEDIUM
Local
|
qemu suse
|
qemu linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop linux_enterprise_server_for_sap
|
Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-5898
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252320
|
5.5 |
MEDIUM
Local
|
fedoraproject netpbm_project
|
fedora netpbm
|
tiffttopnm in netpbm 10.47.63 does not properly use the libtiff TIFFRGBAImageGet function, which allows remote attackers to cause a denial of service (out-of-bounds read and write) via a crafted tiff…
|
CWE-125 CWE-787
Out-of-bounds Read Out-of-bounds Write
|
CVE-2017-5849
|
2024-11-21 12:28 |
2017-03-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|