PUBLIÉES EN

novembre 2017

436 CVE, des plus récentes aux plus anciennes.

← octobre 2017 décembre 2017 →

CVE-2017-2695TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application. 5.5 MOYENNE

CVE-2017-2691Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EVA-TL00C01B373 have a … 6.8 MOYENNE

CVE-2017-2690SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace U1930 with software … 5.5 MOYENNE

CVE-2017-12172PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root operating system accou… 6.7 MOYENNE

CVE-2017-15099INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to re… 6.5 MOYENNE

CVE-2017-12193The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of … 5.5 MOYENNE

CVE-2017-12190The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small consecutive buffers be… 6.5 MOYENNE

CVE-2017-7736A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbitrary web script or H… 5.4 MOYENNE

CVE-2017-6166In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkernel (TMM) may crash whe… 5.9 MOYENNE

CVE-2017-8860Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device information via a spe… 6.5 MOYENNE

CVE-2017-16919MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web script or HTML via a c… 5.4 MOYENNE

CVE-2017-3157By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's filesystem. Informat… 5.5 MOYENNE

CVE-2017-16908In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromising an administrator ac… 5.4 MOYENNE

CVE-2017-16907In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. 5.4 MOYENNE

CVE-2017-16906In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action. 5.4 MOYENNE

CVE-2017-16904The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator. 6.1 MOYENNE

CVE-2017-15527Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there is insufficient secu… 6.8 MOYENNE

CVE-2017-16898The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a denial of service via a … 5.5 MOYENNE

CVE-2017-11400An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker to upgrade the equipm… 6.8 MOYENNE

CVE-2017-15110In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all parti… 4.3 MOYENNE

CVE-2017-16883The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a denial of service vi… 6.5 MOYENNE

CVE-2017-16881b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProces… 6.1 MOYENNE

CVE-2017-14077HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT'] parameter to example… 6.1 MOYENNE

CVE-2017-1000221In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access control incorrectly so t… 6.5 MOYENNE

CVE-2017-1000128Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser 5.5 MOYENNE

CVE-2017-1000127Exiv2 0.26 contains a heap buffer overflow in tiff parser 5.5 MOYENNE

CVE-2017-1000126exiv2 0.26 contains a Stack out of bounds read in webp parser 5.5 MOYENNE

CVE-2017-16880The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS. 6.1 MOYENNE

CVE-2017-1000227Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can 5.4 MOYENNE

CVE-2017-1000163The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may result in phishing or … 6.1 MOYENNE

CVE-2017-13702An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused. 5.3 MOYENNE

CVE-2017-13700An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface. 4.8 MOYENNE

CVE-2017-1000168sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys 6.5 MOYENNE

CVE-2017-16819A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary JavaScript in the nameFir… 5.4 MOYENNE

CVE-2017-1000211Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can append a chunk onto itself. 5.3 MOYENNE

CVE-2017-4938VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow at… 6.5 MOYENNE

CVE-2017-4929VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure. 6.1 MOYENNE

CVE-2017-10890Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmware versions prior to 79.17.17.09, RX-CLV… 4.6 MOYENNE

CVE-2017-10889TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors. 4.3 MOYENNE

CVE-2017-10888BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspecified vectors. 5.5 MOYENNE

CVE-2017-10886Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and… 5.4 MOYENNE

CVE-2017-16868In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows remote attackers to cause a denial of s… 5.5 MOYENNE

CVE-2017-1000226Stop User Enumeration 1.3.8 allows user enumeration via the REST API 5.3 MOYENNE

CVE-2017-1000225Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anything an admin can 6.1 MOYENNE

CVE-2017-1000223A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can … 5.4 MOYENNE

CVE-2017-1000164Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation 5.4 MOYENNE

CVE-2017-1000160EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection 5.4 MOYENNE

CVE-2017-1000246Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data. 5.3 MOYENNE

CVE-2017-1000236I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inject malicious client side scripting which… 6.1 MOYENNE

CVE-2017-1000234I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating directories simply by navigating through the "di… 5.3 MOYENNE