Max CVSS | 7.8 | Min CVSS | 4.0 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2017-6411 | 6.8 |
Cross Site Request Forgery (CSRF) on D-Link DSL-2730U C1 IN_1.00 devices allows remote attackers to change the DNS or firewall configuration or any password.
|
26-04-2023 - 18:55 | 06-03-2017 - 06:59 | |
CVE-2017-6467 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a Netscaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by changing the restrictions on file size.
|
03-10-2019 - 00:03 | 04-03-2017 - 03:59 | |
CVE-2017-6470 | 7.8 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is an IAX2 infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-iax2.c by constraining packet lateness.
|
03-10-2019 - 00:03 | 04-03-2017 - 03:59 | |
CVE-2017-6474 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser infinite loop, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating record sizes.
|
03-10-2019 - 00:03 | 04-03-2017 - 03:59 | |
CVE-2017-10212 | 4.0 |
Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with network access via
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
CVE-2017-6468 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a NetScaler file parser crash, triggered by a malformed capture file. This was addressed in wiretap/netscaler.c by validating the relationship between pages and records.
|
13-03-2019 - 18:21 | 04-03-2017 - 03:59 | |
CVE-2017-6473 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a K12 file parser crash, triggered by a malformed capture file. This was addressed in wiretap/k12.c by validating the relationships between lengths and offsets.
|
13-03-2019 - 18:03 | 04-03-2017 - 03:59 | |
CVE-2017-6471 | 5.0 |
In Wireshark 2.2.0 to 2.2.4 and 2.0.0 to 2.0.10, there is a WSP infinite loop, triggered by packet injection or a malformed capture file. This was addressed in epan/dissectors/packet-wsp.c by validating the capability length.
|
13-03-2019 - 17:41 | 04-03-2017 - 03:59 | |
CVE-2008-2719 | 6.8 |
Off-by-one error in the ppscan function (preproc.c) in Netwide Assembler (NASM) 2.02 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted file that triggers a stack-based buffer ove
|
30-10-2018 - 16:28 | 16-06-2008 - 23:41 | |
CVE-2006-4325 | 6.8 |
Cross-site scripting (XSS) vulnerability in gbook.php in Doika guestbook 2.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the page parameter.
|
17-10-2018 - 21:34 | 24-08-2006 - 01:04 | |
CVE-2004-2076 | 4.3 |
Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
|
11-07-2017 - 01:31 | 31-12-2004 - 05:00 | |
CVE-2017-5999 | 5.0 |
An issue was discovered in sysPass 2.x before 2.1, in which an algorithm was never sufficiently reviewed by cryptographers. The fact that inc/SP/Core/Crypt.class is using the MCRYPT_RIJNDAEL_256() function (the 256-bit block version of Rijndael, not
|
15-03-2017 - 18:42 | 06-03-2017 - 06:59 | |
CVE-2017-6416 | 7.5 |
An issue was discovered in SysGauge 1.5.18. A buffer overflow vulnerability in SMTP connection verification leads to arbitrary code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka "Service ready") string.
|
08-03-2017 - 02:59 | 06-03-2017 - 02:59 | |
CVE-2015-8761 | 6.0 |
The Values module 7.x-1.x before 7.x-1.2 for Drupal does not properly check permissions, which allows remote administrators with the "Import value sets" permission to execute arbitrary PHP code via the exported values list in a ctools import.
|
12-01-2016 - 02:46 | 08-01-2016 - 19:59 |