Security Vulnerabilities, CVEs, Published In 2017 CVSS score >= 7

CVE-2004-2778

Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or write to restricted directories or execute restricted commands via navigating to the affected directories, or executing the affected commands.
Max CVSS
7.1
EPSS Score
0.04%
Published
2017-06-27
Updated
2017-07-05

CVE-2007-5199

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
Max CVSS
9.8
EPSS Score
0.77%
Published
2017-08-18
Updated
2020-07-30

CVE-2007-5341

Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8.
Max CVSS
9.8
EPSS Score
1.28%
Published
2017-08-18
Updated
2017-08-29

CVE-2007-6759

Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCRABBIT cookie.
Max CVSS
9.8
EPSS Score
0.70%
Published
2017-04-07
Updated
2017-04-13

CVE-2007-6760

Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cycle attacks on connected devices, via a DCCOOKIE cookie.
Max CVSS
9.8
EPSS Score
0.70%
Published
2017-04-07
Updated
2017-04-13

CVE-2007-6761

drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows local users to trigger an incorrect count value and videobuf leak via unspecified vectors, a different vulnerability than CVE-2010-5321.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-04-24
Updated
2017-04-27

CVE-2008-7313

The _httpsrequest function in Snoopy allows remote attackers to execute arbitrary commands. NOTE: this issue exists dues to an incomplete fix for CVE-2008-4796.
Max CVSS
9.8
EPSS Score
1.70%
Published
2017-03-31
Updated
2017-04-04

CVE-2008-7315

UI-Dialog 1.09 and earlier allows remote attackers to execute arbitrary commands.
Max CVSS
9.8
EPSS Score
1.17%
Published
2017-10-10
Updated
2017-11-03

CVE-2008-7319

The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell metacharacters before use of backticks in External.pm, allowing for shell command injection and arbitrary command execution if untrusted input is used.
Max CVSS
10.0
EPSS Score
0.13%
Published
2017-11-07
Updated
2017-11-29

CVE-2009-5147

DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
Max CVSS
7.5
EPSS Score
0.77%
Published
2017-03-29
Updated
2018-03-28

CVE-2010-1816

Buffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a crafted image.
Max CVSS
9.3
EPSS Score
1.08%
Published
2017-04-13
Updated
2017-04-21

CVE-2010-1821

Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to obtain system privileges.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-04-13
Updated
2017-04-21

CVE-2010-2232

In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.
Max CVSS
7.5
EPSS Score
0.21%
Published
2017-10-23
Updated
2017-10-27

CVE-2010-2245

XML External Entity (XXE) vulnerability in Apache Wink 1.1.1 and earlier allows remote attackers to read arbitrary files or cause a denial of service via a crafted XML document.
Max CVSS
7.4
EPSS Score
0.09%
Published
2017-08-08
Updated
2017-08-16

CVE-2010-3845

libapache-authenhook-perl 2.00-04 stores usernames and passwords in plaintext in the vhost error log.
Max CVSS
9.8
EPSS Score
0.28%
Published
2017-08-08
Updated
2017-08-18

CVE-2010-4314

Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter.
Max CVSS
9.3
EPSS Score
3.17%
Published
2017-03-11
Updated
2017-03-15

CVE-2010-5327

Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.
Max CVSS
8.8
EPSS Score
0.33%
Published
2017-01-13
Updated
2017-01-17

CVE-2011-0469

Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
Max CVSS
9.8
EPSS Score
0.54%
Published
2017-08-17
Updated
2017-08-25

CVE-2011-1935

pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafted packets.
Max CVSS
9.8
EPSS Score
0.68%
Published
2017-10-20
Updated
2021-06-15

CVE-2011-3177

The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
Max CVSS
7.8
EPSS Score
0.04%
Published
2017-09-08
Updated
2017-09-18

CVE-2011-3428

Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code.
Max CVSS
9.8
EPSS Score
2.06%
Published
2017-04-24
Updated
2017-04-28

CVE-2011-3438

WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution.
Max CVSS
8.8
EPSS Score
0.91%
Published
2017-04-24
Updated
2017-04-28

CVE-2011-4334

edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated users to upload arbitrary PHP files via a PHP file with a .gif extension in the userfile parameter.
Max CVSS
8.8
EPSS Score
0.18%
Published
2017-10-23
Updated
2017-10-25

CVE-2011-4343

Information disclosure vulnerability in Apache MyFaces Core 2.0.1 through 2.0.10 and 2.1.0 through 2.1.4 allows remote attackers to inject EL expressions via crafted parameters.
Max CVSS
7.5
EPSS Score
0.12%
Published
2017-08-08
Updated
2017-11-02

CVE-2011-4650

Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. If the size of server.log becomes very big because of too much logging by the DCNM server, then the CPU utilization increases. Known Affected Releases: 5.2(1). Known Fixed Releases: 6.0(0)SL1(0.14) 5.2(2.73)S0. Product identification: CSCtt15295.
Max CVSS
7.5
EPSS Score
0.12%
Published
2017-08-07
Updated
2017-08-25
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close