| Max CVSS | 9.3 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-2667 | 6.8 |
Hammer CLI, a CLI utility for Foreman, before version 0.10.0, did not explicitly set the verify_ssl flag for apipie-bindings that disable it by default. As a result the server certificates are not checked and connections are prone to man-in-the-middl
|
26-01-2024 - 17:46 | 12-03-2018 - 15:29 | |
| CVE-2017-6964 | 7.2 |
dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged use
|
21-01-2024 - 01:37 | 28-03-2017 - 01:59 | |
| CVE-2016-9473 | 4.3 |
Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate domain names.
|
19-03-2021 - 18:40 | 28-03-2017 - 02:59 | |
| CVE-2017-3194 | 4.3 |
Pandora iOS app prior to version 8.3.2 fails to properly validate SSL certificates provided by HTTPS connections, which may enable an attacker to conduct man-in-the-middle (MITM) attacks.
|
09-10-2019 - 23:27 | 16-12-2017 - 02:29 | |
| CVE-2017-0881 | 4.0 |
An error in the implementation of an autosubscribe feature in the check_stream_exists route of the Zulip group chat application server before 1.4.3 allowed an authenticated user to subscribe to a private stream that should have required an invitation
|
09-10-2019 - 23:21 | 28-03-2017 - 02:59 | |
| CVE-2017-0882 | 4.0 |
Multiple versions of GitLab expose sensitive user credentials when assigning a user to an issue or merge request. A fix was included in versions 8.15.8, 8.16.7, and 8.17.4, which were released on March 20th 2017 at 23:59 UTC.
|
09-10-2019 - 23:21 | 28-03-2017 - 02:59 | |
| CVE-2017-10186 | 5.0 |
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User and Company Profile). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability all
|
03-10-2019 - 00:03 | 08-08-2017 - 15:29 | |
| CVE-2008-2712 | 9.3 |
Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3)
|
01-11-2018 - 15:07 | 16-06-2008 - 21:41 | |
| CVE-2017-6542 | 7.5 |
The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol message and leveraging the ability to connect to the Unix-domain socket representing the forward
|
30-10-2018 - 16:27 | 27-03-2017 - 17:59 | |
| CVE-2004-0159 | 7.5 |
Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" comma
|
10-10-2017 - 01:30 | 15-03-2004 - 05:00 | |
| CVE-2016-9990 | 4.3 |
IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted ses
|
12-07-2017 - 01:29 | 31-03-2017 - 18:59 | |
| CVE-2016-8917 | 6.8 |
IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 2000943.
|
04-04-2017 - 20:45 | 31-03-2017 - 18:59 | |
| CVE-2017-6518 | 4.3 |
Cross-site scripting (XSS) vulnerability in /sanadata/seo/index.asp in SANADATA SanaCMS 7.3 allows remote attackers to inject arbitrary web script or HTML via the txtFrom parameter.
|
30-03-2017 - 01:59 | 08-03-2017 - 00:59 |