WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Published from 2017-01-01✕Published to 2017-12-31✕
Overview 18,113 matches · 800 in Waratek scope · 102 protected · 211 exploited · 89 CISA KEV · 1,424 public PoC · 246 EPSS ≥ 0.5
18,113matches 800in Waratek scope4.4% 102protected0.6% 211exploited1.2% 89CISA KEV0.5% 1,424public PoC7.9% 246EPSS ≥ 0.51.4%
Protected by Waratek 104 0.6% Rule in development 0 0.0% Mitigation candidate 14 0.1% No exploit published 682 3.8% Outside Waratek scope 245 1.4% Not applicable 13,597 75.1% Withdrawn CVE 3,471 19.2%
Critical 2,113 11.7% High 6,608 36.5% Medium 5,687 31.4% Low 234 1.3% None 0 0.0% Unknown 3,471 19.2%
blocked by ARMR today 102 0.6% partly blocked 2 0.0% not blocked 18,009 99.4% not established 0 0.0% unrecorded 0 0.0%
Exploited 211 1.2% Working exploit published 1,260 7.0% Proof of concept only 52 0.3% Forecast only 23 0.1% No public exploit 16,567 91.5%
split by peak 4,155 / month
Withdrawn CVE: 3,471Not applicable: 13,597Outside Waratek scope: 245No exploit published: 682Mitigation candidate: 14Protected by Waratek: 104 Unknown: 3,471Low: 234Medium: 5,687High: 6,608Critical: 2,113 not blocked: 18,009partly blocked: 2blocked by ARMR today: 102 No public exploit: 16,567Forecast only: 23Proof of concept only: 52Working exploit published: 1,260Exploited: 211
Jan 171,141 Protected by Waratek9 Mitigation candidate2 No exploit published120 Outside Waratek scope23 Not applicable929 Withdrawn CVE58 Critical166 High529 Medium362 Low26 Unknown58 blocked by ARMR today9 not blocked1,132 Exploited7 Working exploit published57 Proof of concept only8 Forecast only1 No public exploit1,068 Feb 171,075 Protected by Waratek3 Mitigation candidate1 No exploit published5 Outside Waratek scope16 Not applicable1,016 Withdrawn CVE34 Critical120 High426 Medium459 Low36 Unknown34 blocked by ARMR today3 not blocked1,072 Exploited3 Working exploit published82 Forecast only1 No public exploit989 Mar 171,371 Protected by Waratek6 No exploit published11 Outside Waratek scope13 Not applicable1,270 Withdrawn CVE71 Critical138 High536 Medium610 Low16 Unknown71 blocked by ARMR today6 not blocked1,365 Exploited30 Working exploit published114 Proof of concept only9 Forecast only1 No public exploit1,217 Apr 171,592 Protected by Waratek16 Mitigation candidate2 No exploit published120 Outside Waratek scope24 Not applicable1,408 Withdrawn CVE22 Critical173 High718 Medium629 Low50 Unknown22 blocked by ARMR today16 not blocked1,576 Exploited26 Working exploit published135 Proof of concept only6 No public exploit1,425 May 174,155 Protected by Waratek5 Mitigation candidate1 No exploit published15 Outside Waratek scope22 Not applicable967 Withdrawn CVE3,145 Critical152 High470 Medium378 Low10 Unknown3,145 blocked by ARMR today5 not blocked4,150 Exploited25 Working exploit published92 Proof of concept only4 Forecast only2 No public exploit4,032 Jun 171,043 Protected by Waratek1 No exploit published20 Outside Waratek scope5 Not applicable1,007 Withdrawn CVE10 Critical134 High450 Medium443 Low6 Unknown10 blocked by ARMR today1 not blocked1,042 Exploited10 Working exploit published116 Proof of concept only2 Forecast only3 No public exploit912 Jul 171,312 Protected by Waratek7 Mitigation candidate2 No exploit published20 Outside Waratek scope14 Not applicable1,225 Withdrawn CVE44 Critical169 High662 Medium430 Low7 Unknown44 blocked by ARMR today7 not blocked1,305 Exploited29 Working exploit published63 Proof of concept only2 No public exploit1,218 Aug 171,564 Protected by Waratek14 Mitigation candidate3 No exploit published169 Outside Waratek scope48 Not applicable1,306 Withdrawn CVE24 Critical246 High657 Medium622 Low15 Unknown24 blocked by ARMR today14 not blocked1,550 Exploited10 Working exploit published101 Proof of concept only1 Forecast only3 No public exploit1,449 Sep 171,232 Protected by Waratek8 No exploit published22 Outside Waratek scope9 Not applicable1,188 Withdrawn CVE5 Critical247 High533 Medium439 Low8 Unknown5 blocked by ARMR today7 partly blocked1 not blocked1,224 Exploited24 Working exploit published123 Proof of concept only5 Forecast only3 No public exploit1,077 Oct 171,433 Protected by Waratek22 Mitigation candidate3 No exploit published151 Outside Waratek scope37 Not applicable1,186 Withdrawn CVE34 Critical186 High636 Medium555 Low22 Unknown34 blocked by ARMR today21 partly blocked1 not blocked1,411 Exploited15 Working exploit published146 Proof of concept only10 Forecast only4 No public exploit1,258 Nov 171,077 Protected by Waratek10 No exploit published18 Outside Waratek scope33 Not applicable1,005 Withdrawn CVE11 Critical154 High454 Medium435 Low23 Unknown11 blocked by ARMR today10 not blocked1,067 Exploited17 Working exploit published73 Proof of concept only3 No public exploit984 Dec 171,118 Protected by Waratek3 No exploit published11 Outside Waratek scope1 Not applicable1,090 Withdrawn CVE13 Critical228 High537 Medium325 Low15 Unknown13 blocked by ARMR today3 not blocked1,115 Exploited15 Working exploit published158 Proof of concept only2 Forecast only5 No public exploit938
Jan 17Feb 17Mar 17Apr 17May 17Jun 17Jul 17Aug 17Sep 17Oct 17Nov 17Dec 17
18,113 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 182 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-18005 Medium 2017-12-31 Not applicable No public exploit Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
CVE-2017-18004 Medium 2017-12-31 Not applicable No public exploit Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
CVE-2017-18001 Critical 2017-12-31 Not applicable Working exploit published Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorized Keys data, and consequently obtain remote root access, via the publicKey parameter to the /sendKey URI.
CVE-2017-17704 High 2017-12-31 Not applicable No public exploit A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Ethernet Door Module. The communications between the IP-ACM and the iStar Ultra is encrypted using a fixed AES key and IV. Each message is encrypted in CBC mode and restarts with the fixed IV, leading to replay attacks of entire messages. There is no authentication of messages beyond the use of the fixed AES key, so message forgery is also possible.
CVE-2017-17997 High 2017-12-30 Not applicable No public exploit In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.
CVE-2017-17995 Medium 2017-12-30 Not applicable No public exploit Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
CVE-2017-17994 Medium 2017-12-30 Not applicable No public exploit Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.
CVE-2017-17993 Medium 2017-12-30 Not applicable No public exploit Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.
CVE-2017-17992 Critical 2017-12-30 Not applicable No public exploit Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.
CVE-2017-17991 Medium 2017-12-30 Not applicable No public exploit Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.
CVE-2017-17990 High 2017-12-30 Not applicable No public exploit Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
CVE-2017-17989 Medium 2017-12-30 Not applicable No public exploit Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.
CVE-2017-17988 Medium 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.
CVE-2017-17987 High 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
CVE-2017-17986 Medium 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.
CVE-2017-17985 Medium 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.
CVE-2017-17984 Medium 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.
CVE-2017-17983 High 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.
CVE-2017-17982 Medium 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
CVE-2017-17981 Medium 2017-12-30 Not applicable No public exploit PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.
CVE-2017-17975 Medium 2017-12-30 Not applicable No public exploit Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified other impact by triggering failure of audio registration, because a kfree of the usbtv data structure occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to both access and free this data structure.
CVE-2017-17089 Medium 2017-12-30 Not applicable No public exploit custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the custom command functionality.
CVE-2017-14855 High 2017-12-30 Not applicable No public exploit Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that does not exist, as demonstrated by version HMI 2.41 PLC 2.42.
CVE-2017-12813 Medium 2017-12-30 Not applicable No public exploit PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.
CVE-2017-12812 Medium 2017-12-30 Not applicable No public exploit PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab.
CVE-2017-12811 Medium 2017-12-30 Not applicable No public exploit PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.
CVE-2017-12810 Medium 2017-12-30 Not applicable No public exploit PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.
CVE-2017-1000447 Unknown 2017-12-30 Withdrawn CVE No public exploit Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-15955. Reason: This candidate is a reservation duplicate of CVE-2017-15955. Notes: All CVE users should reference CVE-2017-15955 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE-2017-1000446 Unknown 2017-12-30 Withdrawn CVE No public exploit Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-15954. Reason: This candidate is a reservation duplicate of CVE-2017-15954. Notes: All CVE users should reference CVE-2017-15954 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE-2017-1000440 Unknown 2017-12-30 Withdrawn CVE No public exploit Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14976. Reason: This candidate is a reservation duplicate of CVE-2017-14976. Notes: All CVE users should reference CVE-2017-14976 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE-2017-1000436 Unknown 2017-12-30 Withdrawn CVE No public exploit Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-14975. Reason: This candidate is a reservation duplicate of CVE-2017-14975. Notes: All CVE users should reference CVE-2017-14975 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE-2017-1000435 Unknown 2017-12-30 Withdrawn CVE No public exploit Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-16227. Reason: This candidate is a reservation duplicate of CVE-2017-16227. Notes: All CVE users should reference CVE-2017-16227 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE-2016-10704 Medium 2017-12-30 Not applicable No public exploit Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled during a preview, aka APPSEC-1503.
CVE-2017-17974 Critical 2017-12-29 Not applicable No public exploit BA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account.
CVE-2017-17973 High 2017-12-29 Not applicable No public exploit In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reproduce this issue
CVE-2017-17971 Medium 2017-12-29 Not applicable No public exploit The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which allows XSS.
CVE-2017-17968 Critical 2017-12-29 Not applicable Working exploit published A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response.
CVE-2017-17933 Medium 2017-12-29 Not applicable No public exploit cgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter.
CVE-2017-17920 High 2017-12-29 Not applicable No public exploit SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
CVE-2017-17919 High 2017-12-29 Not applicable No public exploit SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
CVE-2017-17917 High 2017-12-29 Not applicable No public exploit SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
CVE-2017-17916 High 2017-12-29 Not applicable No public exploit SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
CVE-2017-17910 Medium 2017-12-29 Not applicable No public exploit On Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The interception of the one-time pairing process is specifically not required. Due to use of AES-128 with an initial static random value and static data vector (all of this static information is the same across different customers' installations), the attacker can easily derive the utilized encryption key and decrypt the intercepted packet. The key can be verified by decrypting the intercepted packet and checking for known plaintext. Subsequently, an attacker can create arbitrary radio frames with the correct encryption key to control BiSecur garage and entrance gate operators and possibly other BiSecur systems as well ("wireless cloning"). To conduct the attack, a low cost Software Defined Radio (SDR) is sufficient. This affects Hoermann Hand Transmitter HS5-868-BS, HSE1-868-BS, and HSE2-868-BS devices.
CVE-2017-17901 High 2017-12-29 Not applicable No public exploit ZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consumption) via a flood of IP packets with a TTL of 1.
CVE-2017-17760 Medium 2017-12-29 Not applicable No public exploit OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.
CVE-2017-16876 Medium 2017-12-29 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.
CVE-2016-3695 Medium 2017-12-29 Not applicable No public exploit The einj_error_inject function in drivers/acpi/apei/einj.c in the Linux kernel allows local users to simulate hardware errors and consequently cause a denial of service by leveraging failure to disable APEI error injection through EINJ when securelevel is set.
CVE-2015-8008 High 2017-12-29 Not applicable No public exploit The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP address access restrictions by making an API request with an existing token.
CVE-2015-3302 High 2017-12-29 Not applicable Working exploit published The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote attackers to obtain sensitive order detail information by leveraging a "broken authentication mechanism."
CVE-2014-9515 Critical 2017-12-29 Not applicable Proof of concept only Dozer improperly uses a reflection-based approach to type conversion, which might allow remote attackers to execute arbitrary code via a crafted serialized object.
CVE-2014-8119 High 2017-12-29 Not applicable No public exploit The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
CVE-2014-4978 Medium 2017-12-29 Not applicable No public exploit The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-filter-graph.png or (2) /tmp/rs-filter-graph.
CVE-2014-4914 Critical 2017-12-29 Not applicable No public exploit The Zend_Db_Select::order function in Zend Framework before 1.12.7 does not properly handle parentheses, which allows remote attackers to conduct SQL injection attacks via unspecified vectors.
CVE-2014-3651 High 2017-12-29 No exploit published No public exploit JBoss KeyCloak before 1.0.3.Final allows remote attackers to cause a denial of service (resource consumption) via a large value in the size parameter to auth/qrcode, related to QR code generation.
CVE-2014-3630 Critical 2017-12-29 Protected by Waratek No public exploit XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data.
CVE-2014-0121 Critical 2017-12-29 No exploit published No public exploit The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter.
CVE-2014-0120 High 2017-12-29 No exploit published No public exploit Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf server, as demonstrated by running "shutdown -f."
CVE-2013-7400 High 2017-12-29 Not applicable No public exploit The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.
CVE-2013-4578 Medium 2017-12-29 No exploit published No public exploit jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
CVE-2017-5641 Critical 2017-12-28 Protected by Waratek No public exploit Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.
CVE-2017-17967 Medium 2017-12-28 Not applicable No public exploit pptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482.
CVE-2017-17960 High 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
CVE-2017-17959 Critical 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.
CVE-2017-17958 Medium 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
CVE-2017-17957 Critical 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
CVE-2017-17956 Medium 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.
CVE-2017-17955 Medium 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
CVE-2017-17954 Medium 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
CVE-2017-17953 Medium 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
CVE-2017-17952 High 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
CVE-2017-17951 Critical 2017-12-28 Not applicable No public exploit PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.
CVE-2017-17950 High 2017-12-28 Not applicable No public exploit Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
CVE-2017-17949 Medium 2017-12-28 Not applicable No public exploit Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
CVE-2017-17948 Medium 2017-12-28 Not applicable No public exploit Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.
CVE-2017-17942 High 2017-12-28 Not applicable No public exploit In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.
CVE-2017-17941 High 2017-12-28 Not applicable No public exploit PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
CVE-2017-17940 Medium 2017-12-28 Not applicable No public exploit PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
CVE-2017-17939 High 2017-12-28 Not applicable No public exploit PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
CVE-2017-17938 Medium 2017-12-28 Not applicable No public exploit PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.
CVE-2017-17937 Medium 2017-12-28 Not applicable No public exploit Vanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
CVE-2017-17936 High 2017-12-28 Not applicable No public exploit Vanguard Marketplace Digital Products PHP has CSRF via /search.
CVE-2017-17932 Critical 2017-12-28 Not applicable Working exploit published A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.
CVE-2017-15892 Medium 2017-12-28 Not applicable No public exploit Multiple cross-site scripting (XSS) vulnerabilities in Slash Command Creator in Synology Chat before 2.0.0-1124 allow remote authenticated users to inject arbitrary web script or HTML via (1) COMMAND, (2) COMMANDS INSTRUCTION, or (3) DESCRIPTION parameter.
CVE-2017-15886 Medium 2017-12-28 Not applicable No public exploit Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary local files via a crafted URI.
CVE-2017-15711 Unknown 2017-12-28 Withdrawn CVE No public exploit Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE-2017-15667 High 2017-12-28 Not applicable Working exploit published In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9221.
CVE-2017-10910 Medium 2017-12-28 Not applicable No public exploit MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.
CVE-2015-7889 Medium 2017-12-28 Not applicable Working exploit published The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.
CVE-2015-3637 High 2017-12-28 Not applicable No public exploit SQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows remote attackers to execute arbitrary SQL commands via the username and password parameters.
CVE-2014-8389 Critical 2017-12-28 Not applicable Forecast only cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-3025 with firmware 1.81 21.08.2014, AirLive WL-2000CAM with firmware LM.1.6.18 14.10.2011, and AirLive POE-200CAM v2 with firmware LM.1.6.17.01 uses hard-coded credentials in the embedded Boa web server, which allows remote attackers to obtain user credentials via crafted HTTP requests.
CVE-2017-9944 Critical 2017-12-27 Not applicable No public exploit A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrated web server (port 80/tcp) of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network.
CVE-2017-9608 Medium 2017-12-27 Not applicable No public exploit The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted mov file.
CVE-2017-7163 High 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7162 High 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7160 High 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVE-2017-7159 High 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOAcceleratorFamily" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7158 Medium 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Screen Sharing Server" component. It allows attackers to obtain root privileges for reading files by leveraging screen-sharing access.
CVE-2017-7157 High 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVE-2017-7156 High 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.
CVE-2017-7155 High 2017-12-27 Not applicable No public exploit An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
‹ prev page 1 of 182 next ›