|
197631
|
6.1 |
MEDIUM
Network
|
finecms_project
|
finecms
|
The oauth function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the Referer HTTP header with Internet Explorer.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14193
|
2024-11-21 12:12 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197632
|
6.1 |
MEDIUM
Network
|
finecms_project
|
finecms
|
The checktitle function in controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the module field.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14192
|
2024-11-21 12:12 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197633
|
7.8 |
HIGH
Local
|
aacplusenc_project
|
aacplusenc
|
DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and applicat…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-14181
|
2024-11-21 12:12 |
2017-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197634
|
9.8 |
CRITICAL
Network
|
fiberhome
|
adsl_an1020-25_firmware
|
An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link ht…
|
CWE-287
Improper Authentication
|
CVE-2017-14147
|
2024-11-21 12:12 |
2017-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197635
|
6.5 |
MEDIUM
Network
|
imagemagick debian canonical
|
imagemagick debian_linux ubuntu_linux
|
In coders/xbm.c in ImageMagick 7.0.6-1 Q16, a DoS in ReadXBMImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted XBM file, which claims large rows and co…
|
CWE-834
Excessive Iteration
|
CVE-2017-14175
|
2024-11-21 12:12 |
2017-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197636
|
6.5 |
MEDIUM
Network
|
imagemagick canonical debian
|
imagemagick ubuntu_linux debian_linux
|
In coders/psd.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSDLayersInternal() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large …
|
CWE-834
Excessive Iteration
|
CVE-2017-14174
|
2024-11-21 12:12 |
2017-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197637
|
6.5 |
MEDIUM
Network
|
imagemagick debian canonical
|
imagemagick debian_linux ubuntu_linux
|
In the function ReadTXTImage() in coders/txt.c in ImageMagick 7.0.6-10, an integer overflow might occur for the addition operation "GetQuantumRange(depth)+1" when "depth" is large, producing a smalle…
|
CWE-190 CWE-835
Integer Overflow or Wraparound Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2017-14173
|
2024-11-21 12:12 |
2017-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197638
|
6.5 |
MEDIUM
Network
|
imagemagick debian canonical
|
imagemagick debian_linux ubuntu_linux
|
In coders/ps.c in ImageMagick 7.0.7-0 Q16, a DoS in ReadPSImage() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted PSD file, which claims a large "extent" fi…
|
CWE-834
Excessive Iteration
|
CVE-2017-14172
|
2024-11-21 12:12 |
2017-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197639
|
6.5 |
MEDIUM
Network
|
ffmpeg
|
ffmpeg
|
In libavformat/nsvdec.c in FFmpeg 2.4 and 3.3.3, a DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check might cause huge CPU consumption. When a crafted NSV file, which claims a l…
|
CWE-834
Excessive Iteration
|
CVE-2017-14171
|
2024-11-21 12:12 |
2017-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
197640
|
8.8 |
HIGH
Network
|
ffmpeg debian
|
ffmpeg debian_linux
|
In the mxf_read_primer_pack function in libavformat/mxfdec.c in FFmpeg 3.3.3 -> 2.4, an integer signedness error might occur when a crafted file, which claims a large "item_num" field such as 0xfffff…
|
CWE-20
Improper Input Validation
|
CVE-2017-14169
|
2024-11-21 12:12 |
2017-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|