Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2017-15032 |
|
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
|
| CVE-2017-15033 |
|
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
|
| CVE-2017-12268 |
|
Vulnerability in cisco (CVE-2017-12268)
vulnerability in cisco (CVE-2017-12268). Data can be tampered with by attackers.
|
| CVE-2017-12266 |
|
Vulnerability in cisco (CVE-2017-12266)
vulnerability in cisco (CVE-2017-12266). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12267 |
|
Buffer Overflow in dos (CVE-2017-12267)
vulnerability in dos (CVE-2017-12267). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12270 |
|
Buffer Overflow in dos (CVE-2017-12270)
vulnerability in dos (CVE-2017-12270). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15035 |
|
Buffer Overflow in dos (CVE-2017-15035)
vulnerability in dos (CVE-2017-15035). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12263 |
|
Path Traversal in path-traversal (CVE-2017-12263)
path traversal in path-traversal (CVE-2017-12263). Confidential information can be exposed externally.
|
| CVE-2017-15024 |
|
Vulnerability in c (CVE-2017-15024)
vulnerability in c (CVE-2017-15024). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15018 |
|
Out-of-Bounds Read in c (CVE-2017-15018)
vulnerability in c (CVE-2017-15018). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15020 |
|
Out-of-Bounds Read in c (CVE-2017-15020)
vulnerability in c (CVE-2017-15020). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15021 |
|
Out-of-Bounds Read in c (CVE-2017-15021)
vulnerability in c (CVE-2017-15021). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15017 |
|
Vulnerability in c (CVE-2017-15017)
vulnerability in c (CVE-2017-15017). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15019 |
|
Vulnerability in c (CVE-2017-15019)
vulnerability in c (CVE-2017-15019). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15022 |
|
Vulnerability in c (CVE-2017-15022)
vulnerability in c (CVE-2017-15022). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15023 |
|
Vulnerability in c (CVE-2017-15023)
vulnerability in c (CVE-2017-15023). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-9628 |
|
Information Disclosure in saia-burgess-controls (CVE-2017-9628)
vulnerability in saia-burgess-controls (CVE-2017-9628). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-13993 |
|
Vulnerability in i-sens (CVE-2017-13993)
vulnerability in i-sens (CVE-2017-13993). Successful exploitation can lead to full system takeover.
|
| CVE-2017-12728 |
|
Privilege Escalation in spidercontrol (CVE-2017-12728)
vulnerability in spidercontrol (CVE-2017-12728). Successful exploitation can lead to full system takeover.
|
| CVE-2017-13995 |
|
Authentication Bypass in spidercontrol (CVE-2017-13995)
authentication bypass in spidercontrol (CVE-2017-13995). Successful exploitation can lead to full system takeover.
|
| CVE-2017-14000 |
|
Authentication Bypass in ctekproducts (CVE-2017-14000)
authentication bypass in ctekproducts (CVE-2017-14000). Confidential information can be exposed externally.
|
| CVE-2017-15015 |
|
Vulnerability in c (CVE-2017-15015)
vulnerability in c (CVE-2017-15015). Successful exploitation can lead to full system takeover.
|
| CVE-2017-15016 |
|
Vulnerability in c (CVE-2017-15016)
vulnerability in c (CVE-2017-15016). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000116 |
|
OS Command Injection in mercurial (CVE-2017-1000116)
OS command injection in mercurial (CVE-2017-1000116). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.3` or later.
|
| CVE-2017-1000112 |
|
Vulnerability in linux (CVE-2017-1000112)
vulnerability in linux (CVE-2017-1000112). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000111 |
|
Out-of-Bounds Write in linux (CVE-2017-1000111)
out-of-bounds write in linux (CVE-2017-1000111). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000101 |
|
Buffer Overflow in haxx (CVE-2017-1000101)
vulnerability in haxx (CVE-2017-1000101). Confidential information can be exposed externally.
|
| CVE-2017-1000118 |
|
Buffer Overflow in dos (CVE-2017-1000118)
vulnerability in dos (CVE-2017-1000118). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000117 |
|
Open Redirect in git-scm (CVE-2017-1000117)
vulnerability in git-scm (CVE-2017-1000117). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000099 |
|
Information Disclosure in haxx (CVE-2017-1000099)
vulnerability in haxx (CVE-2017-1000099). Confidential information can be exposed externally.
|
| CVE-2017-1000100 |
|
Information Disclosure in haxx (CVE-2017-1000100)
vulnerability in haxx (CVE-2017-1000100). Confidential information can be exposed externally. Exploitable via ``CURLOPT_REDIR_PROTOCOLS``.
|
| CVE-2017-1000108 |
|
Information Disclosure in jenkins (CVE-2017-1000108)
vulnerability in jenkins (CVE-2017-1000108). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000113 |
|
Information Disclosure in jenkins (CVE-2017-1000113)
vulnerability in jenkins (CVE-2017-1000113). Confidential information can be exposed externally.
|
| CVE-2017-1000114 |
|
Information Disclosure in c (CVE-2017-1000114)
vulnerability in c (CVE-2017-1000114). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000119 |
|
Unrestricted File Upload in octobercms (CVE-2017-1000119)
vulnerability in octobercms (CVE-2017-1000119). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000104 |
|
Privilege Escalation in jenkins (CVE-2017-1000104)
vulnerability in jenkins (CVE-2017-1000104). Confidential information can be exposed externally.
|
| CVE-2017-1000115 |
|
Vulnerability in mercurial (CVE-2017-1000115)
vulnerability in mercurial (CVE-2017-1000115). Data can be tampered with by attackers. Mitigation: upgrade to `4.3` or later.
|
| CVE-2017-1000120 |
|
SQL Injection in sqli (CVE-2017-1000120)
SQL injection in sqli (CVE-2017-1000120). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000102 |
|
Cross-Site Scripting (XSS) in jenkins (CVE-2017-1000102)
cross-site scripting in jenkins (CVE-2017-1000102). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000103 |
|
Cross-Site Scripting (XSS) in jenkins (CVE-2017-1000103)
cross-site scripting in jenkins (CVE-2017-1000103). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000109 |
|
Cross-Site Scripting (XSS) in jenkins (CVE-2017-1000109)
cross-site scripting in jenkins (CVE-2017-1000109). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000105 |
|
Vulnerability in jenkins (CVE-2017-1000105)
vulnerability in jenkins (CVE-2017-1000105). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000106 |
|
Authentication Bypass in jenkins (CVE-2017-1000106)
authentication bypass in jenkins (CVE-2017-1000106). Data can be tampered with by attackers.
|
| CVE-2017-1000110 |
|
Authentication Bypass in jenkins (CVE-2017-1000110)
authentication bypass in jenkins (CVE-2017-1000110). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-1000086 |
|
Vulnerability in jenkins (CVE-2017-1000086)
vulnerability in jenkins (CVE-2017-1000086). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000095 |
|
Vulnerability in jenkins (CVE-2017-1000095)
vulnerability in jenkins (CVE-2017-1000095). Confidential information can be exposed externally.
|
| CVE-2017-1000096 |
|
Vulnerability in c (CVE-2017-1000096)
vulnerability in c (CVE-2017-1000096). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000085 |
|
Cross-Site Request Forgery (CSRF) in jenkins (CVE-2017-1000085)
vulnerability in jenkins (CVE-2017-1000085). Confidential information can be exposed externally.
|
| CVE-2017-1000090 |
|
Cross-Site Request Forgery (CSRF) in jenkins (CVE-2017-1000090)
vulnerability in jenkins (CVE-2017-1000090). Successful exploitation can lead to full system takeover.
|
| CVE-2017-1000091 |
|
Cross-Site Request Forgery (CSRF) in jenkins (CVE-2017-1000091)
vulnerability in jenkins (CVE-2017-1000091). Risk of unauthorized operations or information disclosure.
|