|
197941
|
8.1 |
HIGH
Network
|
apple
|
mac_os_x
|
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain a…
|
CWE-287
Improper Authentication
|
CVE-2017-13872
|
2024-11-21 12:11 |
2017-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197942
|
9.8 |
CRITICAL
Network
|
moxa
|
eds-g512e_firmware
|
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are sto…
|
CWE-200
Information Exposure
|
CVE-2017-13701
|
2024-11-21 12:11 |
2017-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197943
|
7.5 |
HIGH
Network
|
moxa
|
eds-g512e_firmware
|
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent …
|
CWE-326
Inadequate Encryption Strength
|
CVE-2017-13699
|
2024-11-21 12:11 |
2017-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197944
|
7.5 |
HIGH
Network
|
moxa
|
eds-g512e_firmware
|
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image available on the MOXA website and could use them agains…
|
NVD-CWE-noinfo
|
CVE-2017-13698
|
2024-11-21 12:11 |
2017-11-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197945
|
7.5 |
HIGH
Network
|
moxa
|
eds-g512e_firmware
|
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur.
|
CWE-20
Improper Input Validation
|
CVE-2017-13703
|
2024-11-21 12:11 |
2017-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197946
|
5.3 |
MEDIUM
Network
|
moxa
|
eds-g512e_firmware
|
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused.
|
CWE-200
Information Exposure
|
CVE-2017-13702
|
2024-11-21 12:11 |
2017-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197947
|
4.8 |
MEDIUM
Network
|
moxa
|
eds-g512e_firmware
|
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface.
|
CWE-79
Cross-site Scripting
|
CVE-2017-13700
|
2024-11-21 12:11 |
2017-11-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197948
|
8.8 |
HIGH
Network
|
libbpg_project
|
libbpg
|
The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-13136
|
2024-11-21 12:11 |
2017-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197949
|
7.8 |
HIGH
Local
|
libbpg_project
|
libbpg
|
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in common/cudata.cpp mishandles memory-allocation failure.
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-13135
|
2024-11-21 12:11 |
2017-11-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197950
|
9.8 |
CRITICAL
Network
|
schneider-electric
|
wonderware_intouch wonderware_indusoft_web_studio
|
A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouch Machine Edition v8.0 SP2 Patch 1 and prior versions. The …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-14024
|
2024-11-21 12:11 |
2017-11-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|