CVE-2017-13727There is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remo…
6.5 MOYENNE
CVE-2017-13726There is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8, related to tif_dirwrite.c and a SubIFD tag. A crafted input will lead to a remote den…
6.5 MOYENNE
CVE-2017-13685The dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service (EXC_BAD_ACCESS and application crash) via a crafted file.
5.5 MOYENNE
CVE-2017-2258Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications".
4.3 MOYENNE
CVE-2017-2257Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.
6.1 MOYENNE
CVE-2017-2256Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".
5.4 MOYENNE
CVE-2017-2255Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
5.4 MOYENNE
CVE-2017-2254Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input
4.9 MOYENNE
CVE-2017-1489IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not …
6.1 MOYENNE
CVE-2017-1110IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to view the incidents of a higher privileged…
6.5 MOYENNE
CVE-2017-10841Directory traversal vulnerability in WebCalendar 1.2.7 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
4.9 MOYENNE
CVE-2017-10840Cross-site scripting vulnerability in WebCalendar 1.2.7 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
6.1 MOYENNE
CVE-2017-10838Cross-site scripting vulnerability in SEO Panel prior to version 3.11.0 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
6.1 MOYENNE
CVE-2017-10837Cross-site scripting vulnerability in BackupGuard prior to version 1.1.47 allows an attacker to inject arbitrary web script or HTML via unspecified vectors.
6.1 MOYENNE
CVE-2017-10834Directory traversal vulnerability in "Dokodemo eye Smart HD" SCR02HD Firmware 1.0.3.1000 and earlier allows authenticated attackers to read arbitrary files via unspecified vectors.
6.5 MOYENNE
CVE-2016-9732IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…
5.4 MOYENNE
CVE-2016-2970IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application to possible attackers. IBM X-Force ID: …
4.3 MOYENNE
CVE-2017-13716The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation…
5.5 MOYENNE
CVE-2017-9979On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, if the REST call invoked does not exist, an error will be triggered containing the invalid method previously invoked. T…
6.1 MOYENNE
CVE-2017-9978On the OSNEXUS QuantaStor v4 virtual appliance before 4.3.1, a flaw was found with the error message sent as a response for users that don't exist on the system. An attacker could …
5.3 MOYENNE
CVE-2017-3735While parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one-byte overread. This would result in an incorrect text display of the certificate. Thi…
5.3 MOYENNE
CVE-2017-12954The gig::Region::GetSampleFromWavePool function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a cr…
6.5 MOYENNE
CVE-2017-12953The gig::Instrument::UpdateRegionKeyTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (invalid memory write and application crash) via …
6.5 MOYENNE
CVE-2017-12952The LoadString function in helper.h in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig file.
6.5 MOYENNE
CVE-2017-12951The gig::DimensionRegion::CreateVelocityTable function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application…
6.5 MOYENNE
CVE-2017-12950The gig::Region::Region function in gig.cpp in libgig 4.0.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted gig …
6.5 MOYENNE
CVE-2017-12925Double free vulnerability in DfFromLB in docfile.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.
6.5 MOYENNE
CVE-2017-12924CDirVector::GetTable in dirfunc.hxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (divide-by-zero error) via a crafted fpx image.
6.5 MOYENNE
CVE-2017-12923OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
6.5 MOYENNE
CVE-2017-12922wchar.c in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
6.5 MOYENNE
CVE-2017-12921PFileFlashPixView::GetGlobalInfoProperty in f_fpxvw.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
6.5 MOYENNE
CVE-2017-12920CDirectory::GetDirEntry in dir.cxx in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted fpx image.
6.5 MOYENNE
CVE-2017-12919Heap-based buffer overflow in OLEStream::WriteVT_LPSTR in olestrm.cpp in libfpx 1.3.1_p6 allows remote attackers to cause a denial of service via a crafted fpx image.
6.5 MOYENNE
CVE-2017-12877Use-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.
6.5 MOYENNE
CVE-2017-12876Heap-based buffer overflow in enhance.c in ImageMagick before 7.0.6-6 allows remote attackers to cause a denial of service via a crafted file.
6.5 MOYENNE
CVE-2017-12077Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) before 1.1.4-6509 allows remote authenticated attacker to exhaust…
4.9 MOYENNE
CVE-2017-12076Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation (DSM) before 6.1.1-15088 allows remote authenticated attacker to exhaust t…
4.9 MOYENNE
CVE-2015-0233Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38.
4.2 MOYENNE
CVE-2014-8163Directory traversal vulnerability in the XMLRPC interface in Red Hat Satellite 5.
6.5 MOYENNE
CVE-2013-7430Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the xmlns parameter.
6.1 MOYENNE
CVE-2015-3976Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.
5.4 MOYENNE
CVE-2015-2046Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20.
6.1 MOYENNE
CVE-2015-1177Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.
6.1 MOYENNE
CVE-2015-0210wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.
5.9 MOYENNE
CVE-2015-0101Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Business Process Manager Express 7.5…
6.1 MOYENNE
CVE-2014-9557Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.
6.1 MOYENNE
CVE-2014-9514Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.
6.1 MOYENNE
CVE-2014-9469Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.
6.1 MOYENNE
CVE-2014-8753Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.
6.1 MOYENNE
CVE-2014-8168Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
6.1 MOYENNE