CVE-2017-17xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
868 records · Page 1 of 9
SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the search parameter to index.php/knowledge_base/get_article_suggestion/.
UpdatedIn Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissectors/packet-mrdisc.c by validating an IPv4 address. This vulnerability is similar to CVE-2017-9343.
UpdatedA buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise server and possibly remote command execution with SYSTEM privilege.
UpdatedBiometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
UpdatedBiometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.
UpdatedBiometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.
UpdatedBiometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name parameter in a download_form action.
UpdatedBiometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.
UpdatedBiometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
UpdatedBiometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.
UpdatedPHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.
UpdatedPHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
UpdatedPHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.
UpdatedPHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.
UpdatedPHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.
UpdatedPHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.
Updated- CVE-2017-17982: PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php. Unscored
PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
Updated PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.
UpdatedIn Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
UpdatedUse-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to cause a denial of service (system crash) or possibly have unspecified other impact by triggering failure of audio registration, because a kfree of the usbtv data structure occurs during a usbtv_video_free call, but the usbtv_video_fail label's code attempts to
UpdatedBA SYSTEMS BAS Web on BAS920 devices (with Firmware 01.01.00*, HTTPserv 00002, and Script 02.*) and ISC2000 devices allows remote attackers to obtain sensitive information via a request for isc/get_sid_js.aspx or isc/get_sid.aspx, as demonstrated by obtaining administrative access by subsequently using the credential information for the Supervisor/Administrator account.
UpdatedIn LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a third-party report of inability to reproduce this issue
Updatedpackages/subjects/pub/subjects.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?subjecttypeid=xxx request, aka Open Bug Bounty ID OBB-466362.
UpdatedThe test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which allows XSS.
UpdatedMultiple SQL injection vulnerabilities in Muviko 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to login.php; the (2) season_id parameter to themes/flixer/ajax/load_season.php; the (3) movie_id parameter to themes/flixer/ajax/get_rating.php; the (4) rating or (5) movie_id parameter to themes/flixer/ajax/update_rating.php; or the (6) id parameter to themes/
UpdatedHeap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before 18.00 and p7zip allows remote attackers to cause a denial of service (out-of-bounds write) or potentially execute arbitrary code via a crafted ZIP archive.
UpdatedA buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response.
Updatedpptreader.dll in Kingsoft WPS Office 10.1.0.6930 allows remote attackers to cause a denial of service via a crafted PPT file, aka CNVD-2017-35482.
Updated- CVE-2017-17960: PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php. Unscored
PHP Scripts Mall PHP Multivendor Ecommerce has CSRF via admin/sellerupd.php.
Updated PHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the seller-view.php usid parameter.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the my_wishlist.php fid parameter.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
UpdatedPHP Scripts Mall PHP Multivendor Ecommerce has SQL Injection via the shopping-cart.php cusid parameter.
UpdatedCells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
UpdatedCells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
Updated- CVE-2017-17948: Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request. Unscored
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.
Updated A cross site scripting issue has been found in custompage.cgi in Pulse Secure Pulse Connect Secure (PCS) before 8.0R17.0, 8.1.x before 8.1R13, 8.2.x before 8.2R9, and 8.3.x before 8.3R3 and Pulse Policy Secure (PPS) before 5.2R10, 5.3.x before 5.3R9, and 5.4.x before 5.4R3 due to one of the URL parameters not being sanitized. Exploitation does require the user to be logged in as administrator; the
UpdatedA buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action.
UpdatedThe ASUS HiVivo aspplication before 5.6.27 for ASUS Watch has Missing SSL Certificate Validation.
UpdatedThe ASUS Vivobaby application before 1.1.09 for Android has Missing SSL Certificate Validation.
UpdatedIn LibTIFF 4.0.9, there is a heap-based buffer over-read in the function PackBitsEncode in tif_packbits.c.
UpdatedPHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
UpdatedPHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
Updated- CVE-2017-17939: PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. Unscored
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
Updated PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.
UpdatedVanguard Marketplace Digital Products PHP has XSS via the phps_query parameter to /search.
UpdatedVanguard Marketplace Digital Products PHP has CSRF via /search.
UpdatedThe File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not properly strip '\n' characters, which allows remote attackers to cause a denial of service (buffer underflow and application crash) via a crafted packet that triggers the attempted processing of an empty line.
UpdatedImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and ProcessMSLScript, and associated with mishandling of MSLPushImage calls.
Updatedcgi/surgeftpmgr.cgi (aka the Web Manager interface on TCP port 7021 or 9021) in NetWin SurgeFTP version 23f2 has XSS via the classid, domainid, or username parameter.
UpdatedA buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888.
UpdatedPHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.
UpdatedPHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a setting in the user panel.
UpdatedPHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.
UpdatedPHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.
UpdatedPHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATH_INFO to service-list/category/.
UpdatedPHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invalid or spoofed e-mail address.
UpdatedPHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter.
UpdatedPHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the id parameter to admin/review_userwise.php.
UpdatedSQL injection vulnerability in the 'reorder' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
UpdatedSQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
UpdatedSQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
UpdatedSQL injection vulnerability in the 'find_by' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'name' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with untrusted input
UpdatedIn GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, related to accessing one byte before testing whether a limit has been reached.
UpdatedIn ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows attackers to cause a denial of service (ReadOneMNGImage large loop) via a crafted mng image file.
UpdatedIn GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type.
UpdatedIn GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c, in which LocaleNCompare reads heap data beyond the allocated region.
Updatedpackages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request, aka Open Bug Bounty ID OBB-278503.
UpdatedOn Hoermann BiSecur devices before 2018, a vulnerability can be exploited by recording a single radio transmission. An attacker can intercept an arbitrary radio frame exchanged between a BiSecur transmitter and a receiver to obtain the encrypted packet and the 32-bit serial number. The interception of the one-time pairing process is specifically not required. Due to use of AES-128 with an initial
UpdatedPHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter.
UpdatedPHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
UpdatedPHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter.
UpdatedPHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.
UpdatedPHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.
UpdatedFS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_profile.
UpdatedFS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
UpdatedSQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.
UpdatedZyXEL P-660HW v3 devices allow remote attackers to cause a denial of service (CPU consumption) via a flood of IP packets with a TTL of 1.
UpdatedSQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter.
UpdatedSQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter.
UpdatedDolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.
UpdatedSQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Updated- CVE-2017-17896: Readymade Job Site Script has XSS via the keyword parameter to the /job URI. Unscored
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
Updated Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
UpdatedReadymade Job Site Script has CSRF via the /job URI.
UpdatedReadymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter.
UpdatedReadymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.
UpdatedReadymade Video Sharing Script has CSRF via user-profile-edit.php.
UpdatedKliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a crafted string in Tags or Description within pligg/submit.php.
Updatedcgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001, Carlo Gavazzi SIU-DLG, AEDILIS SMART-1, SYXTHSENSE WebBiter, ABB SREA, and ASCON DY WebServer devices, allows remote authenticated users to execute arbitrary OS commands via crafted multipart/form-data content, a different vulnerability than CVE-2017-9097.
UpdatedIn ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c, which allows attackers to cause a denial of service via a crafted MNG image file that is processed by ReadOneMNGImage.
UpdatedIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, which allows attackers to cause a denial of service via a crafted psd image file.
UpdatedIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, which allows attackers to cause a denial of service via a crafted PICT image file.
UpdatedIn ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, which allows attackers to cause a denial of service via a crafted PNG image file.
UpdatedIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which allows attackers to cause a denial of service via a crafted PGX image file.
Updated