|
265321
|
8.8 |
HIGH
Network
|
heketi_project
redhat
|
heketi
enterprise_linux
|
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote …
|
-
|
CVE-2017-15103
|
2024-11-21 12:14 |
2017-12-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265322
|
3.3 |
LOW
Local
|
symantec
|
norton_family
|
Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first…
|
CWE-200
Information Exposure
|
CVE-2017-15530
|
2024-11-21 12:14 |
2017-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265323
|
6.2 |
MEDIUM
Local
|
symantec
|
norton_family
|
Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service (DoS) exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular device…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-15529
|
2024-11-21 12:14 |
2017-12-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265324
|
5.5 |
MEDIUM
Local
|
redhat
|
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_eus
enterprise_linux_server_aus
|
A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that does not end aligned to a page boundary.
|
-
|
CVE-2017-15121
|
2024-11-21 12:14 |
2017-12-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265325
|
7.4 |
HIGH
Local
|
arqbackup
|
arq
|
The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.
|
CWE-362
CWE-59
Race Condition
Link Following
|
CVE-2017-15357
|
2024-11-21 12:14 |
2017-12-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265326
|
9.8 |
CRITICAL
Network
|
inedo
|
otter
|
Inedo Otter before 1.7.4 has directory traversal in filesystem-based rafts via vectors involving '/' characters or initial '.' characters, aka OT-181.
|
CWE-22
Path Traversal
|
CVE-2017-15607
|
2024-11-21 12:14 |
2017-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265327
|
5.5 |
MEDIUM
Local
|
linux
redhat
|
linux_kernel
enterprise_linux
|
The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereference).
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-15116
|
2024-11-21 12:14 |
2017-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265328
|
7.2 |
HIGH
Network
|
cs-cart
|
cs-cart
|
The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors involving a custom page.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2017-15673
|
2024-11-21 12:14 |
2017-11-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265329
|
7.5 |
HIGH
Network
|
samba
redhat
debian
canonical
|
samba
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
debian_linux
ubuntu_linux
|
Samba before 4.7.3 might allow remote attackers to obtain sensitive information by leveraging failure of the server to clear allocated heap memory.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-15275
|
2024-11-21 12:14 |
2017-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
265330
|
8.1 |
HIGH
Network
|
teampass
|
teampass
|
TeamPass before 2.1.27.9 does not properly enforce item access control when requesting items.queries.php. It is then possible to copy any arbitrary item into a directory controlled by the attacker, e…
|
CWE-269
Improper Privilege Management
|
CVE-2017-15055
|
2024-11-21 12:14 |
2017-11-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
