CVE-2017-10000 to CVE-2017-10999

39 CVEs with public proof-of-concept exploits.

• CVE-2017-100331 PoCVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that…
• CVE-2017-100461 PoCVulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web…
• CVE-2017-100751 PoCVulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions…
• CVE-2017-101291 PoCVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected…
• CVE-2017-102041 PoCVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected…
• CVE-2017-102351 PoCVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected…
• CVE-2017-102461 PoCVulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Supported versions that…
• CVE-2017-1027133 PoCsKEVVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that…
• CVE-2017-102731 PoCVulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent: Deployment). Supported versions that are…
• CVE-2017-103091 PoCVulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE:…
• CVE-2017-103551 PoCVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that…
• CVE-2017-103662 PoCsVulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor).…
• CVE-2017-106171 PoCContrail: XML External Entity (XXE) vulnerability
• CVE-2017-106612 PoCsRace condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain privileges or cause a denial of service (list…
• CVE-2017-106651 PoCDirectory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5 allows remote attackers to execute…
• CVE-2017-106721 PoCUse-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the…
• CVE-2017-106781 PoCCross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for…
• CVE-2017-106791 PoCPiwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the…
• CVE-2017-106801 PoCCross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for…
• CVE-2017-106811 PoCCross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for…
• CVE-2017-106821 PoCSQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands…
• CVE-2017-106861 PoCIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm. The related heap is…
• CVE-2017-106881 PoCIn LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c. A crafted input…
• CVE-2017-107112 PoCsIn SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user…
• CVE-2017-107181 PoCRecently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that any malicious…
• CVE-2017-107191 PoCRecently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has…
• CVE-2017-107201 PoCRecently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop…
• CVE-2017-107211 PoCRecently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the device has…
• CVE-2017-107221 PoCRecently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that the desktop…
• CVE-2017-107231 PoCRecently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker…
• CVE-2017-107241 PoCRecently it was discovered as a part of the research on IoT devices in the most recent firmware for Shekar Endoscope that an attacker…
• CVE-2017-107901 PoCThe _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input…
• CVE-2017-107951 PoCCross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body…
• CVE-2017-108031 PoCIn Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the…
• CVE-2017-109102 PoCsMQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.
• CVE-2017-109281 PoCIn ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers to obtain sensitive…
• CVE-2017-109521 PoCThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User…
• CVE-2017-109743 PoCsYaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only…
• CVE-2017-109921 PoCIn HPE Storage Essentials 9.5.0.142, there is Unauthenticated Java Deserialization with remote code execution via OS commands in a request…