CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In July 2017

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
351 CVE-2017-11189 476 DoS 2017-07-12 2021-10-18
4.3
None Remote Medium Not required None None Partial
unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), which could be relevant if unrarlib is used as library code for a long-running application. NOTE: one of the several test cases in the references may be the same as what was separately reported as CVE-2017-14121.
352 CVE-2017-11188 834 2017-07-12 2019-10-03
7.8
None Remote Low Not required None None Complete
The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted DPX file, related to lack of an EOF check.
353 CVE-2017-11187 307 2017-07-12 2019-10-03
5.0
None Remote Low Not required Partial None None
phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.
354 CVE-2017-11184 89 Sql 2017-07-28 2017-08-04
7.5
None Remote Low Not required Partial Partial Partial
SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.
355 CVE-2017-11183 20 2017-07-28 2017-08-07
5.5
None Remote Low ??? None Partial Partial
front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
356 CVE-2017-11182 79 XSS 2017-07-12 2017-07-14
3.5
None Remote Medium ??? None Partial None
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable.
357 CVE-2017-11181 79 XSS 2017-07-12 2017-07-14
3.5
None Remote Medium ??? None Partial None
In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vulnerable.
358 CVE-2017-11180 79 XSS 2017-07-12 2017-07-16
4.3
None Remote Medium Not required None Partial None
FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an HTTP request or (2) the username entered on the login screen.
359 CVE-2017-11179 79 XSS 2017-07-12 2017-07-16
4.3
None Remote Medium Not required None Partial None
FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account.
360 CVE-2017-11178 345 2017-07-12 2019-10-03
5.0
None Remote Low Not required None Partial None
In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked.
361 CVE-2017-11176 416 DoS 2017-07-11 2018-12-13
7.2
None Local Low Not required Complete Complete Complete
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the retry logic. During a user-space close of a Netlink socket, it allows attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.
362 CVE-2017-11174 89 Sql 2017-07-12 2017-07-27
7.5
None Remote Low Not required Partial Partial Partial
In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL Injection in the database settings page, related to use of GBK in CHARACTER SET and COLLATE clauses.
363 CVE-2017-11173 2017-07-13 2020-03-03
6.8
None Remote Medium Not required Partial Partial Partial
Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed.
364 CVE-2017-11171 835 2017-07-11 2019-10-03
4.9
None Local Low Not required None None Complete
Bad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old versions of gnome-session up until version 2.29.92 allows a local attacker to establish ICE connections to gnome-session with invalid authentication data (an invalid magic cookie). Each failed authentication attempt will leak a file descriptor in gnome-session. When the maximum number of file descriptors is exhausted in the gnome-session process, it will enter an infinite loop trying to communicate without success, consuming 100% of the CPU. The graphical session associated with the gnome-session process will stop working correctly, because communication with gnome-session is no longer possible.
365 CVE-2017-11170 772 2017-07-11 2019-10-03
6.8
None Remote Medium Not required Partial Partial Partial
The ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via invalid colors data in the header of a TGA or VST file.
366 CVE-2017-11167 94 Exec Code 2017-07-12 2017-07-14
7.5
None Remote Low Not required Partial Partial Partial
FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', sequence in a domain name, as demonstrated by the ',phpinfo() input value.
367 CVE-2017-11166 772 2017-07-10 2019-10-03
7.1
None Remote Medium Not required None None Complete
The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted length (number of color-map entries) field in the header of an XWD file.
368 CVE-2017-11165 200 +Info 2017-07-12 2017-08-15
5.0
None Remote Low Not required Partial None None
dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for the /services/getFile.cmd?userfile=config.xml URI.
369 CVE-2017-11164 674 2017-07-11 2021-02-25
7.8
None Remote Low Not required None None Complete
In PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion (uncontrolled recursion) when processing a crafted regular expression.
370 CVE-2017-11163 79 XSS 2017-07-10 2019-05-03
3.5
None Remote Medium ??? None Partial None
Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via specially crafted HTTP Referer headers, related to the $cancel_url variable.
371 CVE-2017-11147 125 2017-07-10 2019-10-03
6.4
None Remote Low Not required Partial None Partial
In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash the PHP interpreter or potentially disclose information due to a buffer over-read in the phar_parse_pharfile function in ext/phar/phar.c.
372 CVE-2017-11146 200 +Info 2017-07-10 2017-07-18
5.0
None Remote Low Not required Partial None None
In PHP through 5.6.31, 7.x through 7.0.21, and 7.1.x through 7.1.7, lack of bounds checks in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-11145.
373 CVE-2017-11145 200 +Info 2017-07-10 2018-05-04
5.0
None Remote Low Not required Partial None None
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: the correct fix is in the e8b7698f5ee757ce2c8bd10a192a491a498f891c commit, not the bd77ac90d3bdf31ce2a5251ad92e9e75 gist.
374 CVE-2017-11144 754 2017-07-10 2018-05-04
5.0
None Remote Low Not required None None Partial
In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of the OpenSSL sealing function, which could lead to a crash of the PHP interpreter, related to an interpretation conflict for a negative number in ext/openssl/openssl.c, and an OpenSSL documentation omission.
375 CVE-2017-11143 416 2017-07-10 2018-05-04
5.0
None Remote Low Not required None None Partial
In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for deserialization to crash the PHP interpreter, related to an invalid free for an empty boolean element in ext/wddx/wddx.c.
376 CVE-2017-11142 400 DoS 2017-07-10 2018-01-14
7.8
None Remote Low Not required None None Complete
In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by injecting long form variables, related to main/php_variables.c.
377 CVE-2017-11141 772 2017-07-10 2019-10-03
7.1
None Remote Medium Not required None None Complete
The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a crafted MAT file, related to incorrect ordering of a SetImageExtent call.
378 CVE-2017-11140 400 DoS 2017-07-10 2019-10-03
7.1
None Remote Medium Not required None None Complete
The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which allows remote attackers to cause a denial of service (resource consumption) via crafted JPEG files.
379 CVE-2017-11139 415 2017-07-10 2019-05-03
7.5
None Remote Low Not required Partial Partial Partial
GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.
380 CVE-2017-11128 79 XSS 2017-07-17 2017-07-19
3.5
None Remote Medium ??? None Partial None
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
381 CVE-2017-11127 79 XSS 2017-07-17 2017-07-19
3.5
None Remote Medium ??? None Partial None
Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
382 CVE-2017-11126 125 DoS 2017-07-10 2019-10-03
4.3
None Remote Medium Not required None None Partial
The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-read and application crash) via a crafted audio file that is mishandled in the code for the "block_type != 2" case, a similar issue to CVE-2017-9870.
383 CVE-2017-11125 476 2017-07-10 2020-02-03
7.5
None Remote Low Not required Partial Partial Partial
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.
384 CVE-2017-11124 476 2017-07-10 2020-02-03
7.5
None Remote Low Not required Partial Partial Partial
libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.
385 CVE-2017-11119 125 DoS 2017-07-31 2017-08-07
4.3
None Remote Medium Not required None None Partial
The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted nsf file.
386 CVE-2017-11118 835 DoS 2017-07-31 2019-10-03
7.1
None Remote Medium Not required None None Complete
The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted jpg file.
387 CVE-2017-11117 125 DoS 2017-07-31 2019-10-03
4.3
None Remote Medium Not required None None Partial
The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
388 CVE-2017-11116 125 DoS 2017-07-31 2019-10-03
6.8
None Remote Medium Not required Partial Partial Partial
The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted jpg file.
389 CVE-2017-11115 119 DoS Overflow 2017-07-31 2017-11-22
4.3
None Remote Medium Not required None None Partial
The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) via a crafted jpg file.
390 CVE-2017-11114 125 DoS 2017-07-31 2017-08-07
4.3
None Remote Medium Not required None None Partial
The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file.
391 CVE-2017-11113 476 DoS 2017-07-08 2019-05-06
5.0
None Remote Low Not required None None Partial
In ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.
392 CVE-2017-11112 20 DoS 2017-07-08 2018-10-21
5.0
None Remote Low Not required None None Partial
In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial of service attack if the terminfo library code is used to process untrusted terminfo data.
393 CVE-2017-11111 119 DoS Overflow 2017-07-08 2019-03-28
6.8
None Remote Medium Not required Partial Partial Partial
In Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted file.
394 CVE-2017-11110 787 DoS 2017-07-08 2019-10-03
6.8
None Remote Medium Not required Partial Partial Partial
The ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of service (heap-based buffer underflow and application crash) or possibly have unspecified other impact via a crafted file, i.e., data is written to memory addresses before the beginning of the tmpBuf buffer.
395 CVE-2017-11109 416 DoS 2017-07-08 2019-08-03
6.8
None Remote Medium Not required Partial Partial Partial
Vim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified other impact via a crafted source (aka -S) file. NOTE: there might be a limited number of scenarios in which this has security relevance.
396 CVE-2017-11108 125 DoS 2017-07-08 2019-10-03
5.0
None Remote Low Not required None None Partial
tcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packet data. The crash occurs in the EXTRACT_16BITS function, called from the stp_print function for the Spanning Tree Protocol.
397 CVE-2017-11107 79 XSS 2017-07-08 2020-11-16
4.3
None Remote Medium Not required None Partial None
phpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or container parameter.
398 CVE-2017-11104 20 Bypass 2017-07-08 2020-09-18
4.3
None Remote Medium Not required None Partial None
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check.
399 CVE-2017-11103 345 2017-07-13 2020-08-18
6.8
None Remote Medium Not required Partial Partial Partial
Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains service-principal names in a way that violates the Kerberos 5 protocol specification. In _krb5_extract_ticket() the KDC-REP service name must be obtained from the encrypted version stored in 'enc_part' instead of the unencrypted version stored in 'ticket'. Use of the unencrypted version provides an opportunity for successful server impersonation and other attacks. NOTE: this CVE is only for Heimdal and other products that embed Heimdal code; it does not apply to other instances in which this part of the Kerberos 5 protocol specification is violated.
400 CVE-2017-11102 20 DoS 2017-07-07 2018-10-18
5.0
None Remote Low Not required None None Partial
The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during JNG reading via a zero-length color_image data structure.
Total number of vulnerabilities : 1280   Page : 1 2 3 4 5 6 7 8 (This Page)9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.