VYPR

CVEs

405,290 total · page 6194 of 8,106

  • CVE-2017-1000486CriKEVJan 3, 2018
    risk 0.86cvss 9.8epss 0.94

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

  • CVE-2017-1000485HigJan 3, 2018
    risk 0.51cvss 7.8epss 0.00

    Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authentication information via standard filesystem operations.

  • CVE-2017-1000484MedJan 3, 2018
    risk 0.40cvss 6.1epss 0.01

    By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, you could be sent to…

  • CVE-2017-1000473HigJan 3, 2018
    risk 0.51cvss 7.8epss 0.01

    Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are parsed and then executed resulting in code execution on the server, potentially as root.

  • CVE-2017-1000472MedJan 3, 2018
    risk 0.42cvss 6.5epss 0.02

    The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or…

  • CVE-2017-1000471CriJan 3, 2018
    risk 0.64cvss 9.8epss 0.09

    EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in memory corruption or denial of service.

  • CVE-2017-1000470HigJan 3, 2018
    risk 0.49cvss 7.5epss 0.08

    EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in the HTTP listener resulting in denial of service.

  • CVE-2017-1000469CriJan 3, 2018
    risk 0.57cvss 9.8epss 0.06

    Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.

  • CVE-2017-1000462MedJan 3, 2018
    risk 0.35cvss 5.4epss 0.01

    BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result in disruption of service and execution of javascript code.

  • CVE-2017-1000461MedJan 3, 2018
    risk 0.31cvss 4.7epss 0.01

    Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the "JS fingerprinting blocking" component, resulting in a malicious website being able to access the fingerprinting-associated browser functionality (that the…

  • CVE-2017-1000460MedJan 3, 2018
    risk 0.42cvss 6.5epss 0.00

    In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_golomb(&gb) is called on an uninitialized get_bits context, which causes a NULL deref exception.

  • CVE-2017-1000483MedJan 3, 2018
    risk 0.42cvss 6.5epss 0.01

    Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.

  • CVE-2017-1000482MedJan 3, 2018
    risk 0.28cvss 5.4epss 0.01

    A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.

  • CVE-2017-1000481MedJan 3, 2018
    risk 0.33cvss 6.1epss 0.01

    When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by letting you click on…

  • CVE-2017-1000480CriJan 3, 2018
    risk 0.64cvss 9.8epss 0.03

    Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.

  • CVE-2017-1000479HigJan 3, 2018
    risk 0.63cvss 8.8epss 0.32

    pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Frame-Options header is set. This is fixed in 2.4.2-RELEASE. OPNsense, a 2015 fork…

  • CVE-2017-1000478MedJan 3, 2018
    risk 0.35cvss 5.4epss 0.01

    ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.

  • CVE-2017-1000477HigJan 3, 2018
    risk 0.49cvss 7.5epss 0.01

    XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks.

  • CVE-2017-1000476MedJan 3, 2018
    risk 0.42cvss 6.5epss 0.03

    ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.

  • CVE-2017-1000490MedJan 3, 2018
    risk 0.35cvss 6.5epss 0.01

    Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.

  • CVE-2017-1000489HigJan 3, 2018
    risk 0.46cvss 8.1epss 0.01

    Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address

  • CVE-2017-1000488MedJan 3, 2018
    risk 0.33cvss 6.1epss 0.01

    Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form.

  • CVE-2017-8049Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8043Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8042Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8030Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8029Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8027Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8026Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8009Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-8008Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-4993Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-4968Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-4958Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-4957Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-4956Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-2774Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-2772Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-2771Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-2770Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-2769Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15564Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15563Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15562Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15561Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15560Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15559Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15558Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15557Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none

  • CVE-2017-15556Jan 3, 2018
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none