CVE-2017-11000 to CVE-2017-11999

196 CVEs with public proof-of-concept exploits.

• CVE-2017-110961 PoCWhen SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function…
• CVE-2017-110971 PoCWhen SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c.
• CVE-2017-110981 PoCWhen SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() function in lib/png.c.
• CVE-2017-110991 PoCWhen SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono() function in…
• CVE-2017-111001 PoCWhen SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in…
• CVE-2017-111011 PoCWhen SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in…
• CVE-2017-111031 PoCHeimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names…
• CVE-2017-111041 PoCKnot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a…
• CVE-2017-111051 PoCThe OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it, although it contains a certificate. This…
• CVE-2017-111071 PoCphpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter.
• CVE-2017-111131 PoCIn ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote…
• CVE-2017-111151 PoCThe ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service…
• CVE-2017-111161 PoCThe ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service…
• CVE-2017-111171 PoCThe ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service…
• CVE-2017-111191 PoCThe chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of…
• CVE-2017-111202 PoCsOn Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to…
• CVE-2017-111211 PoCOn Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can…
• CVE-2017-111221 PoCOn Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak due to insufficient length validation…
• CVE-2017-111271 PoCBolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
• CVE-2017-111281 PoCBolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
• CVE-2017-111511 PoCA vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload…
• CVE-2017-111521 PoCDirectory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote…
• CVE-2017-111531 PoCDeserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote…
• CVE-2017-111541 PoCUnrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote…
• CVE-2017-111551 PoCAn information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to…
• CVE-2017-111653 PoCsdataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for…
• CVE-2017-111751 PoCIn J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.
• CVE-2017-1117612 PoCsThe mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a…
• CVE-2017-111971 PoCIn CyberArk Viewfinity 5.5.10.95 and 6.x before 6.1.1.220, a low privilege user can escalate to an administrative user via a bug within…
• CVE-2017-111981 PoCCross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows remote attackers to…
• CVE-2017-112001 PoCSQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitor_ip parameter.
• CVE-2017-112011 PoCapplication/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated admins to conduct XSS attacks by…
• CVE-2017-112021 PoCFineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either during logging or during…
• CVE-2017-112813 PoCsAdobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploitation could lead to…
• CVE-2017-112822 PoCsAdobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation could lead to…
• CVE-2017-113092 PoCsBuffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary code via a long…
• CVE-2017-1131710 PoCsKEVTelerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which…
• CVE-2017-113181 PoCCobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks when the master server is spoofed. In…
• CVE-2017-113191 PoCPerspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and consequently gain…
• CVE-2017-113202 PoCsPersistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS…
• CVE-2017-113211 PoCThe restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via…
• CVE-2017-113221 PoCThe chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar…
• CVE-2017-113231 PoCStack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS…
• CVE-2017-113302 PoCsThe DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service…
• CVE-2017-113311 PoCThe wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory…
• CVE-2017-113322 PoCsThe startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error…
• CVE-2017-113331 PoCThe vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM)…
• CVE-2017-113411 PoCThere is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
• CVE-2017-113421 PoCThere is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a remote denial of service attack.
• CVE-2017-113461 PoCZoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute arbitrary code via vectors involving the upload…
• CVE-2017-113551 PoCMultiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inject arbitrary web…
• CVE-2017-113561 PoCThe application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated users with certain…
• CVE-2017-113575 PoCsKEVProgress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote…
• CVE-2017-113582 PoCsThe read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory…
• CVE-2017-113592 PoCsThe wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero…
• CVE-2017-113611 PoCInteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via…
• CVE-2017-113662 PoCscomponents/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can…
• CVE-2017-113911 PoCProxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute…
• CVE-2017-113921 PoCProxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote attackers to execute…
• CVE-2017-113942 PoCsProxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbitrary code on…
• CVE-2017-113951 PoCCommand injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers…
• CVE-2017-113982 PoCsA session hijacking via log disclosure vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could…
• CVE-2017-114201 PoCStack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS…
• CVE-2017-114241 PoCIn PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys…
• CVE-2017-114272 PoCsMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
• CVE-2017-114281 PoCMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
• CVE-2017-114291 PoCMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
• CVE-2017-114301 PoCMultiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal
• CVE-2017-114351 PoCThe Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the…
• CVE-2017-114391 PoCIn Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.
• CVE-2017-114401 PoCIn Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi parameter and the…
• CVE-2017-114442 PoCsSubrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET array.
• CVE-2017-114561 PoCGeneko GWR routers allow directory traversal sequences starting with a /../ substring, as demonstrated by unauthenticated read access to…
• CVE-2017-114662 PoCsArbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated…
• CVE-2017-114672 PoCsOrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote…
• CVE-2017-114691 PoCget2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
• CVE-2017-114701 PoCIDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.
• CVE-2017-114711 PoCIDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
• CVE-2017-114941 PoCSQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands…
• CVE-2017-114951 PoCPHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script…
• CVE-2017-114991 PoCNode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to…
• CVE-2017-115001 PoCA directory traversal vulnerability exists in MetInfo 5.3.17. A remote attacker can use ..\ to delete any .zip file via the filenames…
• CVE-2017-115021 PoCTechnicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321.
• CVE-2017-115032 PoCsPHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.
• CVE-2017-115051 PoCThe ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a…
• CVE-2017-115071 PoCA cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an…
• CVE-2017-115091 PoCAn authenticated remote attacker can execute arbitrary code in Firebird SQL Server versions 2.5.7 and 3.0.2 by executing a malformed SQL…
• CVE-2017-115101 PoCAn information leak exists in Wanscam's HW0021 network camera that allows an unauthenticated remote attacker to recover the administrator…
• CVE-2017-115121 PoCThe ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the…
• CVE-2017-115172 PoCsStack-based buffer overflow in GCoreServer.exe in the server in Geutebrueck Gcore 1.3.8.42 and 1.4.2.37 allows remote attackers to execute…
• CVE-2017-115192 PoCspasswd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable…
• CVE-2017-115221 PoCThe WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a…
• CVE-2017-115231 PoCThe ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial…
• CVE-2017-115251 PoCThe ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1 allows remote attackers to cause a denial…
• CVE-2017-115321 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the WriteMPCImage() function in coders/mpc.c.
• CVE-2017-115331 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WriteUILImage() function…
• CVE-2017-115341 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the lite_font_map() function in coders/wmf.c.
• CVE-2017-115351 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the WritePSImage() function…
• CVE-2017-115371 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point Exception (FPE) in the WritePALMImage()…
• CVE-2017-115391 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the ReadOnePNGImage() function in…
• CVE-2017-115401 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer over-read in the GetPixelIndex()…
• CVE-2017-115411 PoCtcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c, related to util-print.c.
• CVE-2017-115421 PoCtcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.
• CVE-2017-115431 PoCtcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.
• CVE-2017-115481 PoCThe _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory…
• CVE-2017-115522 PoCsmpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of…
• CVE-2017-115531 PoCThere is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0.26. A crafted input will lead to remote…
• CVE-2017-115551 PoCThere is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A crafted input will lead to a remote…
• CVE-2017-115561 PoCThere is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser.cpp in LibSass 3.4.5. A crafted input may…
• CVE-2017-115571 PoCAn issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of…
• CVE-2017-115591 PoCAn issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and…
• CVE-2017-115601 PoCAn issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the application, an authenticated user can upload…
• CVE-2017-115611 PoCAn issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the "Group…
• CVE-2017-115672 PoCsCross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of…
• CVE-2017-115781 PoCIt was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to…
• CVE-2017-115791 PoCIn the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device…
• CVE-2017-115801 PoCBlipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the…
• CVE-2017-115811 PoCdayrui FineCms 5.0.9 has Cross Site Scripting (XSS) in admin/Login.php via a payload in the username field that does not begin with a '<'…
• CVE-2017-115821 PoCdayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags request to libraries/Template.php.
• CVE-2017-115831 PoCdayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php.
• CVE-2017-115841 PoCdayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member, action=form, or action=related request…
• CVE-2017-115851 PoCdayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache request to libraries/Template.php, aka Eval…
• CVE-2017-115862 PoCsdayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to controllers/Weixin.php.
• CVE-2017-1161010 PoCsThe XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated…
• CVE-2017-116111 PoCWolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization of the file name in…
• CVE-2017-116241 PoCA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted…
• CVE-2017-116251 PoCA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted…
• CVE-2017-116261 PoCA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted…
• CVE-2017-116271 PoCA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted…
• CVE-2017-116292 PoCsdayrui FineCms through 5.0.10 has Cross Site Scripting (XSS) in controllers/api.php via the function parameter in a c=api&m=data2 request.
• CVE-2017-116401 PoCWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access exception in the WritePTIFImage() function…
• CVE-2017-116571 PoCDashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory.
• CVE-2017-116581 PoCIn the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to trim traversal characters (..) --…
• CVE-2017-116612 PoCsThe _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and…
• CVE-2017-116622 PoCsThe _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via…
• CVE-2017-116632 PoCsThe _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and…
• CVE-2017-116642 PoCsThe _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and…
• CVE-2017-116731 PoCReporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a…
• CVE-2017-116741 PoCReporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE file, related to a…
• CVE-2017-116771 PoCCross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HTML via the query…
• CVE-2017-116781 PoCSQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via the format parameter…
• CVE-2017-116791 PoCCross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config action.
• CVE-2017-116801 PoCCross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.
• CVE-2017-116811 PoCIncorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that should only be…
• CVE-2017-116821 PoCStored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1)…
• CVE-2017-116841 PoCThere is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead to remote denial of…
• CVE-2017-116921 PoCThe function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service…
• CVE-2017-116951 PoCHeap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows…
• CVE-2017-116961 PoCHeap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows…
• CVE-2017-116971 PoCThe __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of…
• CVE-2017-116981 PoCHeap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows…
• CVE-2017-117031 PoCA memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a…
• CVE-2017-117041 PoCA heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a…
• CVE-2017-117051 PoCA memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial…
• CVE-2017-117201 PoCThere is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
• CVE-2017-117231 PoCDirectory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to…
• CVE-2017-117381 PoCIn Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable…
• CVE-2017-117391 PoCIn Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a…
• CVE-2017-117401 PoCIn Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be…
• CVE-2017-117411 PoCHashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.24 uses weak permissions for the sudo helper scripts, allows…
• CVE-2017-117521 PoCThe ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak)…
• CVE-2017-117531 PoCThe GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service…
• CVE-2017-117541 PoCThe WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via…
• CVE-2017-117551 PoCThe WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via…
• CVE-2017-117641 PoCMicrosoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of…
• CVE-2017-117741 PoCKEVMicrosoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how…
• CVE-2017-117831 PoCMicrosoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an…
• CVE-2017-117851 PoCThe Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…
• CVE-2017-117931 PoCInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…
• CVE-2017-117991 PoCChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…
• CVE-2017-118021 PoCChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…
• CVE-2017-118091 PoCChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…
• CVE-2017-118101 PoCInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…
• CVE-2017-118111 PoCChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…
• CVE-2017-118231 PoCThe Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by…
• CVE-2017-118263 PoCsKEVMicrosoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013…
• CVE-2017-118301 PoCDevice Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to…
• CVE-2017-118311 PoCWindows kernel in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold…
• CVE-2017-118391 PoCMicrosoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to take…
• CVE-2017-118401 PoCChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an…
• CVE-2017-118411 PoCChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an…
• CVE-2017-118551 PoCInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…
• CVE-2017-118611 PoCMicrosoft Edge in Windows 10 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same…
• CVE-2017-118701 PoCChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights…
• CVE-2017-118731 PoCChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an…
• CVE-2017-1188242 PoCsKEVMicrosoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office…
• CVE-2017-118851 PoCWindows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703…
• CVE-2017-118901 PoCMicrosoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold…
• CVE-2017-118931 PoCChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code…
• CVE-2017-119031 PoCInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…
• CVE-2017-119061 PoCInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…
• CVE-2017-119071 PoCInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…
• CVE-2017-119091 PoCChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of…
• CVE-2017-119111 PoCChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of…
• CVE-2017-119141 PoCChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user…
• CVE-2017-119181 PoCChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user…