CVE-2017-13000 to CVE-2017-13999

54 CVEs with public proof-of-concept exploits.

• CVE-2017-130562 PoCsThe launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code via a crafted PDF…
• CVE-2017-130671 PoCQNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905…
• CVE-2017-130681 PoCQNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application…
• CVE-2017-130892 PoCsGNU Wget: stack overflow in HTTP protocol handling
• CVE-2017-131291 PoCCross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the…
• CVE-2017-131351 PoCA NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in…
• CVE-2017-131361 PoCThe image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference.
• CVE-2017-131371 PoCThe FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.
• CVE-2017-1315613 PoCsAn elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2,…
• CVE-2017-132091 PoCIn the ServiceManager::add function in the hardware service manager, there is an insecure permissions check based on the PID of the caller…
• CVE-2017-132161 PoCIn ashmem_ioctl of ashmem.c, there is an out-of-bounds write due to insufficient locking when accessing asma. This could lead to a local…
• CVE-2017-132361 PoCIn the KeyStore service, there is a permissions bypass that allows access to protected resources. This could lead to local escalation of…
• CVE-2017-132532 PoCsIn CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to…
• CVE-2017-132582 PoCsIn bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…
• CVE-2017-132602 PoCsIn bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote…
• CVE-2017-132612 PoCsIn bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to…
• CVE-2017-132622 PoCsIn bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. This could lead to…
• CVE-2017-132813 PoCsIn avrc_pars_browsing_cmd of avrc_pars_tg.cc, there is a possible stack buffer overflow due to an incorrect bounds check. This could lead…
• CVE-2017-132861 PoCIn writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched serialization. This could…
• CVE-2017-136481 PoCIn GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c.
• CVE-2017-136631 PoCEncryption key exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to decrypt log files via an…
• CVE-2017-136641 PoCPassword file exposure in firmware in iSmartAlarm CubeOne version 2.2.4.8 and earlier allows attackers to execute arbitrary commands with…
• CVE-2017-136721 PoCQEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of…
• CVE-2017-136966 PoCsA buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise 9.9.14, Sync Breeze…
• CVE-2017-137082 PoCsBuffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted…
• CVE-2017-137132 PoCsT&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to…
• CVE-2017-137331 PoCThere is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of…
• CVE-2017-137341 PoCThere is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0 that will lead to a remote denial of…
• CVE-2017-137543 PoCsCross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows…
• CVE-2017-137712 PoCsLexmark Scan To Network (SNF) 3.2.9 and earlier stores network configuration credentials in plaintext and transmits them in requests,…
• CVE-2017-137722 PoCsMultiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute…
• CVE-2017-137831 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137841 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137851 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137911 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137921 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137941 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137951 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137961 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137971 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-137981 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-138021 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on…
• CVE-2017-138471 PoCAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the…
• CVE-2017-138491 PoCAn issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is…
• CVE-2017-138551 PoCAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is…
• CVE-2017-138614 PoCsAn issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is…
• CVE-2017-138651 PoCAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is…
• CVE-2017-138671 PoCAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is…
• CVE-2017-138682 PoCsAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is…
• CVE-2017-138691 PoCAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is…
• CVE-2017-138723 PoCsAn issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the…
• CVE-2017-138751 PoCAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver"…
• CVE-2017-138761 PoCAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is…
• CVE-2017-138781 PoCAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver"…