|
254081
|
7.5 |
HIGH
Network
|
rpcbind_project
libtirpc_project
ntirpc_project
|
rpcbind
libtirpc
ntirpc
|
rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data size during memory allocation for XDR strings, which allows…
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2017-8779
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254082
|
7.5 |
HIGH
Network
|
quickheal
|
antivirus_pro
internet_security
total_security
|
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 165 PE files in the default installation that do not use ASLR…
|
NVD-CWE-noinfo
|
CVE-2017-8776
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254083
|
9.8 |
CRITICAL
Network
|
quickheal
|
antivirus_pro
internet_security
total_security
|
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file.
|
CWE-787
Out-of-bounds Write
|
CVE-2017-8775
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254084
|
9.8 |
CRITICAL
Network
|
quickheal
|
antivirus_pro
internet_security
total_security
|
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file.
|
CWE-787
Out-of-bounds Write
|
CVE-2017-8774
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254085
|
9.8 |
CRITICAL
Network
|
quickheal
|
antivirus_pro
internet_security
total_security
|
Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper validatio…
|
CWE-787
Out-of-bounds Write
|
CVE-2017-8773
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254086
|
6.5 |
MEDIUM
Network
|
imagemagick
|
imagemagick
|
The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion via a crafted ICON file.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-8765
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254087
|
6.1 |
MEDIUM
Network
|
telaxius
|
epesi
|
Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a…
|
CWE-79
Cross-site Scripting
|
CVE-2017-8763
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254088
|
5.4 |
MEDIUM
Network
|
genixcms
|
genixcms
|
GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element.
|
CWE-79
Cross-site Scripting
|
CVE-2017-8762
|
2024-11-21 12:34 |
2017-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254089
|
6.5 |
MEDIUM
Network
|
brave
|
brave
|
Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is shown in a possibly unexpected way. NOTE: third parties dispute this issue because it is a behavior that might have le…
|
NVD-CWE-noinfo
|
CVE-2017-8459
|
2024-11-21 12:34 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
254090
|
6.5 |
MEDIUM
Network
|
brave
|
brave
|
Brave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com@unsafe.example.com/ is displayed without a clear UI indication that it is not a resource on the safe.exampl…
|
CWE-74
Injection
|
CVE-2017-8458
|
2024-11-21 12:34 |
2017-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
