CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 6 and 6.99)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
3651 CVE-2017-18120 415 2018-02-02 2018-02-14
6.8
None Remote Medium Not required Partial Partial Partial
A double-free bug in the read_gif function in gifread.c in gifsicle 1.90 allows a remote attacker to cause a denial-of-service attack or unspecified other impact via a maliciously crafted file, because last_name is mishandled, a different vulnerability than CVE-2017-1000421.
3652 CVE-2017-18108 94 Exec Code 2019-03-29 2019-04-01
6.5
None Remote Low Single system Partial Partial Partial
The administration SMTP configuration resource in Atlassian Crowd before version 2.10.2 allows remote attackers with administration rights to execute arbitrary code via a JNDI injection.
3653 CVE-2017-18106 287 2019-03-29 2019-04-01
6.0
None Remote Medium Single system Partial Partial Partial
The identifier_hash for a session token in Atlassian Crowd before version 2.9.1 could potentially collide with an identifier_hash for another user or a user in a different directory, this allows remote attackers who can authenticate to Crowd or an application using Crowd for authentication to gain access to another user's session provided they can make their identifier hash collide with another user's session identifier hash.
3654 CVE-2017-18105 384 2019-03-29 2019-04-01
6.8
None Remote Medium Not required Partial Partial Partial
The console login resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers, who have previously obtained a user's JSESSIONID cookie, to gain access to some of the built-in and potentially third party rest resources via a session fixation vulnerability.
3655 CVE-2017-18101 275 2018-04-10 2018-05-17
6.4
None Remote Low Not required Partial Partial None
Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.
3656 CVE-2017-18087 264 Exec Code 2018-02-15 2018-10-12
6.0
None Remote Medium Single system Partial Partial Partial
The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them to gain code execution, exploit CVE-2017-1000117 if a vulnerable version of git is in use, and or determine if an internal service exists via an argument injection vulnerability in the at parameter.
3657 CVE-2017-18080 352 CSRF 2018-02-02 2018-02-13
6.8
None Remote Medium Not required Partial Partial Partial
The saveConfigureSecurity resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify security settings via a Cross-site request forgery (CSRF) vulnerability.
3658 CVE-2017-18048 434 Exec Code 2018-01-23 2018-02-08
6.5
None Remote Low Single system Partial Partial Partial
Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase) is blocked but .PHP (uppercase) is not.
3659 CVE-2017-18042 352 CSRF 2018-02-02 2019-04-29
6.8
None Remote Medium Not required Partial Partial Partial
The update user administration resource in Atlassian Bamboo before version 6.3.1 allows remote attackers to modify user data including passwords via a Cross-site request forgery (CSRF) vulnerability.
3660 CVE-2017-18026 77 Exec Code 2018-01-10 2019-04-26
6.8
None Remote Medium Not required Partial Partial Partial
Redmine before 3.2.9, 3.3.x before 3.3.6, and 3.4.x before 3.4.4 does not block the --config and --debugger flags to the Mercurial hg program, which allows remote attackers to execute arbitrary commands (through the Mercurial adapter) via vectors involving a branch whose name begins with a --config= or --debugger= substring, a related issue to CVE-2017-17536.
3661 CVE-2017-17990 352 CSRF 2017-12-29 2018-01-09
6.8
None Remote Medium Not required Partial Partial Partial
Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
3662 CVE-2017-17987 434 2017-12-29 2018-01-09
6.5
None Remote Low Single system Partial Partial Partial
PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
3663 CVE-2017-17983 89 Sql 2017-12-29 2018-01-09
6.5
None Remote Low Single system Partial Partial Partial
PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.
3664 CVE-2017-17982 352 CSRF 2017-12-29 2018-01-09
6.0
None Remote Medium Single system Partial Partial Partial
PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
3665 CVE-2017-17973 416 2017-12-29 2018-02-11
6.8
None Remote Medium Not required Partial Partial Partial
** DISPUTED ** In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reproduce this issue.
3666 CVE-2017-17969 787 DoS Exec Code Overflow 2018-01-30 2018-05-19
6.8
None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.
3667 CVE-2017-17960 352 CSRF 2017-12-28 2018-04-12
6.8
None Remote Medium Not required Partial Partial Partial
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
3668 CVE-2017-17950 89 Sql 2017-12-28 2018-04-13
6.5
None Remote Low Single system Partial Partial Partial
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
3669 CVE-2017-17945 295 2019-06-24 2019-07-03
6.4
None Remote Low Not required Partial Partial None
The ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.
3670 CVE-2017-17944 295 2019-06-20 2019-06-21
6.4
None Remote Low Not required Partial Partial None
The ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.
3671 CVE-2017-17942 119 Overflow 2017-12-28 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
In LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.
3672 CVE-2017-17941 89 Sql 2017-12-28 2018-01-09
6.5
None Remote Low Single system Partial Partial Partial
PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
3673 CVE-2017-17939 352 CSRF 2017-12-28 2018-01-09
6.8
None Remote Medium Not required Partial Partial Partial
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
3674 CVE-2017-17936 352 CSRF 2017-12-28 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
Vanguard Marketplace Digital Products PHP has CSRF via /search.
3675 CVE-2017-17930 352 CSRF 2017-12-27 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.
3676 CVE-2017-17920 89 Exec Code Sql 2017-12-29 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
** DISPUTED ** SQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
3677 CVE-2017-17919 89 Exec Code Sql 2017-12-29 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
** DISPUTED ** SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
3678 CVE-2017-17917 89 Exec Code Sql 2017-12-29 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
** DISPUTED ** SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
3679 CVE-2017-17916 89 Exec Code Sql 2017-12-29 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
** DISPUTED ** SQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input.
3680 CVE-2017-17915 119 Overflow 2017-12-27 2018-10-18
6.8
None Remote Medium Not required Partial Partial Partial
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached.
3681 CVE-2017-17913 119 Overflow 2017-12-27 2018-10-18
6.8
None Remote Medium Not required Partial Partial Partial
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.
3682 CVE-2017-17912 119 Overflow 2017-12-27 2018-10-18
6.8
None Remote Medium Not required Partial Partial Partial
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region.
3683 CVE-2017-17908 352 CSRF 2017-12-27 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
3684 CVE-2017-17905 352 CSRF 2017-12-27 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
3685 CVE-2017-17903 352 CSRF 2017-12-27 2018-01-09
6.8
None Remote Medium Not required Partial Partial Partial
FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
3686 CVE-2017-17894 352 CSRF 2017-12-27 2018-01-09
6.8
None Remote Medium Not required Partial Partial Partial
Readymade Job Site Script has CSRF via the /job URI.
3687 CVE-2017-17891 352 CSRF 2017-12-27 2018-01-09
6.8
None Remote Medium Not required Partial Partial Partial
Readymade Video Sharing Script has CSRF via user-profile-edit.php.
3688 CVE-2017-17880 119 Overflow 2017-12-27 2018-01-01
6.8
None Remote Medium Not required Partial Partial Partial
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to a WEBP_DECODER_ABI_VERSION check.
3689 CVE-2017-17879 119 Overflow 2017-12-27 2019-04-16
6.8
None Remote Medium Not required Partial Partial Partial
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.c, related to length calculation and caused by an off-by-one error.
3690 CVE-2017-17874 434 2017-12-27 2018-01-11
6.5
None Remote Low Single system Partial Partial Partial
Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product preview" action, which can make a .php file accessible under a uploads/ URI.
3691 CVE-2017-17866 119 DoS Overflow 2017-12-27 2018-11-05
6.8
None Remote Medium Not required Partial Partial Partial
pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during a clean operation, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted PDF document.
3692 CVE-2017-17858 119 Exec Code Overflow 2018-01-22 2018-11-27
6.8
None Remote Medium Not required Partial Partial Partial
Heap-based buffer overflow in the ensure_solid_xref function in pdf/pdf-xref.c in Artifex MuPDF 1.12.0 allows a remote attacker to potentially execute arbitrary code via a crafted PDF file, because xref subsection object numbers are unrestricted.
3693 CVE-2017-17831 20 Exec Code 2017-12-21 2019-08-01
6.8
None Remote Medium Not required Partial Partial Partial
GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, located on a "url =" line in a .lfsconfig file within a repository.
3694 CVE-2017-17830 352 CSRF 2017-12-21 2018-01-03
6.0
None Remote Medium Single system Partial Partial Partial
Bus Booking Script has CSRF via admin/new_master.php.
3695 CVE-2017-17829 89 Sql 2017-12-21 2018-01-03
6.5
None Remote Low Single system Partial Partial Partial
Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.
3696 CVE-2017-17827 352 CSRF 2017-12-20 2018-01-03
6.8
None Remote Medium Not required Partial Partial Partial
Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration&section=main or /admin.php?page=batch_manager&mode=unit. An attacker can exploit this to coerce an admin user into performing unintended actions.
3697 CVE-2017-17809 426 2017-12-20 2018-01-10
6.8
None Remote Medium Not required Partial Partial Partial
In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forcing the VyprVPN application to load a malicious dynamic library every time a new connection is made.
3698 CVE-2017-17789 119 Overflow 2017-12-20 2018-05-01
6.8
None Remote Medium Not required Partial Partial Partial
In GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common/file-psp.c.
3699 CVE-2017-17788 125 2017-12-20 2018-03-15
6.8
None Remote Medium Not required Partial Partial Partial
In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' character after the version string.
3700 CVE-2017-17787 125 2017-12-20 2018-03-15
6.8
None Remote Medium Not required Partial Partial Partial
In GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common/file-psp.c.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.