Published Advisories
The following is a list of all publicly disclosed vulnerabilities discovered by TrendAI™ Zero Day Initiative™ (ZDI) researchers. While the affected vendor is working on a patch for these vulnerabilities, TrendAI™ customers are protected from exploitation by security filters delivered ahead of public disclosure.
All security vulnerabilities that are acquired by TrendAI™ ZDI are handled according to TrendAI™ ZDI's disclosure policy. Once the affected vendor patches the vulnerability, we publish an accompanying security advisory that describes the issue, including links to the vendor's fixes.
Published
Upcoming
| ZDI ID | ZDI CAN | Vendor/Product | CVE | CVSS | Published | Updated | ||
|---|---|---|---|---|---|---|---|---|
ZDI-CAN-5337 |
Huawei |
CVE-2017-15316 |
6.9 |
2018-06-08 |
2018-06-08 |
Huawei Mate 9 Pro Mali Double Free Privilege Escalation Vulnerability |
||
ZDI-CAN-5321 |
Microsoft |
CVE-2017-11889 |
6.8 |
2018-04-16 |
2018-04-16 |
Microsoft Chakra Typed Array JIT Optimization Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-5215 |
Microsoft |
CVE-2017-11837 |
6.8 |
2018-03-23 |
2018-03-23 |
Microsoft Windows JavaScript Typed Array JIT Optimization Use-After-Free Remote Code Execution Vulnerability |
||
ZDI-CAN-5315 |
Microsoft |
CVE-2017-11835 |
2.6 |
2018-03-07 |
2018-03-07 |
Microsoft Windows Font Embedding Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-5154 |
Adobe |
CVE-2017-11308 |
6.8 |
2018-03-07 |
2018-03-07 |
Adobe Acrobat Pro DC ImageConversion EMF BMP Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-5148 |
Adobe |
CVE-2017-11240 |
2.6 |
2018-03-06 |
2018-03-06 |
Adobe Acrobat Pro DC ImageConversion EMF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-5146 |
Adobe |
CVE-2017-11307 |
2.6 |
2018-03-06 |
2018-03-06 |
Adobe Acrobat Pro DC ImageConversion EMF GIF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-5317 |
Microsoft |
CVE-2017-11835 |
2.6 |
2018-03-06 |
2018-03-06 |
Microsoft Windows Font Embedding Out-Of-Bounds Read Information Disclosure Vulnerability |
||
ZDI-CAN-4755 |
Symantec |
CVE-2017-15532 |
4.0 |
2017-12-20 |
Symantec Messaging Gateway Export Servlet snmpFileName Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-5280 |
QNAP |
CVE-2017-17032 |
10.0 |
2017-12-20 |
QNAP QTS Web change_password Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5279 |
QNAP |
CVE-2017-17033 |
10.0 |
2017-12-20 |
QNAP QTS Web sysinfoReq Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5278 |
QNAP |
CVE-2017-17031 |
10.0 |
2017-12-20 |
QNAP QTS Web change_password Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5263 |
QNAP |
CVE-2017-17030 |
10.0 |
2017-12-20 |
QNAP QTS authLogin Host Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5262 |
QNAP |
CVE-2017-17029 |
10.0 |
2017-12-20 |
QNAP QTS authLogin Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5209 |
QNAP |
CVE-2017-17028 |
10.0 |
2017-12-20 |
QNAP QTS Web devRequest Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5208 |
QNAP |
CVE-2017-17027 |
10.0 |
2017-12-20 |
QNAP QTS NASFTPD USER Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5085 |
Wecon |
CVE-2017-16717 |
6.8 |
2017-12-20 |
WECON LeviStudio PLC Driver Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5386 |
Ecava |
CVE-2017-16735 |
5.0 |
2017-12-20 |
Ecava IntegraXor Report getdata name SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-5385 |
Ecava |
CVE-2017-16733 |
5.0 |
2017-12-20 |
Ecava IntegraXor Report batchlist SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-5139 |
Adobe |
CVE-2017-11213 |
6.8 |
2017-12-20 |
Adobe Flash Player BitmapData hitTest Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-5075 |
Adobe |
CVE-2017-3114 |
6.8 |
2017-12-20 |
Adobe Flash LocaleID determinePreferredLocales Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-5074 |
Adobe |
CVE-2017-3112 |
6.8 |
2017-12-20 |
Adobe Flash NetworkConfiguration addCustomHeader Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-4906 |
Quest |
CVE-2017-17659 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUJobHistory Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4316 |
Quest |
CVE-2017-17658 |
7.5 |
2018-01-02 |
Quest NetVault Backup Server Process Manager Service NVBUJobDefinitions Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4294 |
Quest |
CVE-2017-17657 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackup TimeRange Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4292 |
Quest |
CVE-2017-17656 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackup JobList Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4289 |
Quest |
CVE-2017-17655 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackup PluginList Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4287 |
Quest |
CVE-2017-17654 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackup ClientList Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4286 |
Quest |
CVE-2017-17653 |
10.0 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackupOptionSet Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4238 |
Quest |
CVE-2017-17652 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackup Count Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4237 |
Quest |
CVE-2017-17425 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUSourceDeviceSet Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4232 |
Quest |
CVE-2017-17421 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUSelectionSet Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4231 |
Quest |
CVE-2017-17420 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUJobCountHistory Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4230 |
Quest |
CVE-2017-17419 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUTransferHistory Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4229 |
Quest |
CVE-2017-17418 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUPolicy Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4228 |
Quest |
CVE-2017-17417 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus Acknowledge Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4227 |
Quest |
CVE-2017-17416 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus GetPlugins Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4226 |
Quest |
CVE-2017-17415 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus Count Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4225 |
Quest |
CVE-2017-17414 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4224 |
Quest |
CVE-2017-17413 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackupTargetSet Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4235 |
Quest |
CVE-2017-17424 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUScheduleSet Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4234 |
Quest |
CVE-2017-17423 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackupSegment Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4233 |
Quest |
CVE-2017-17422 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUBackup Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4223 |
Quest |
CVE-2017-17412 |
7.5 |
2017-12-15 |
Quest NetVault Backup Server Process Manager Service NVBUEventHistory Get Method SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4892 |
Linksys |
CVE-2017-17411 |
10.0 |
2017-12-18 |
(0Day) Linksys WVBR0 User-Agent Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4789 |
Trend Micro |
CVE-2017-14082 |
6.4 |
2017-12-13 |
Trend Micro Mobile Security for Enterprise clt_report_sms_status Uninitialized Pointer Information Disclosure Vulnerability |
|||
ZDI-CAN-5197 |
NetGain Systems |
CVE-2017-16606 |
9.0 |
2017-12-13 |
NetGain Systems Enterprise Manager _3d.add_005f3d_005fview_005fdo_jsp Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-5196 |
NetGain Systems |
CVE-2017-16605 |
7.5 |
2017-12-13 |
NetGain Systems Enterprise Manager db.save_005fattrs_jsp id Directory Traversal Arbitrary File Overwrite Vulnerability |
|||
ZDI-CAN-5195 |
NetGain Systems |
CVE-2017-16604 |
7.5 |
2017-12-13 |
NetGain Systems Enterprise Manager deviceReport.deviceReport_005fexport_005fdo_jsp filename Directory Traversal Arbitrary File Overwrite Vulnerability |
|||
ZDI-CAN-5194 |
NetGain Systems |
CVE-2017-16603 |
9.0 |
2017-12-13 |
NetGain Systems Enterprise Manager settings.upload_005ffile_005fdo_jsp filename Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-5193 |
NetGain Systems |
CVE-2017-16602 |
9.0 |
2017-12-13 |
NetGain Systems Enterprise Manager tools.exec_jsp command Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-5192 |
NetGain Systems |
CVE-2017-16601 |
7.5 |
2017-12-13 |
NetGain Systems Enterprise Manager service.service_005ffailures_jsp filename Directory Traversal Arbitrary File Overwrite Vulnerability |
|||
ZDI-CAN-5191 |
NetGain Systems |
CVE-2017-16600 |
7.5 |
2017-12-13 |
NetGain Systems Enterprise Manager network.traffic_005freport_jsp filename Directory Traversal Arbitrary File Overwrite Vulnerability |
|||
ZDI-CAN-5190 |
NetGain Systems |
CVE-2017-16599 |
9.4 |
2017-12-13 |
NetGain Systems Enterprise Manager misc.sample_jsp type Directory Traversal Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-5138 |
NetGain Systems |
CVE-2017-16598 |
9.0 |
2017-12-13 |
NetGain Systems Enterprise Manager snmpwalk.snmpwalk_005fdo_jsp ip Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-5137 |
NetGain Systems |
CVE-2017-16597 |
10.0 |
2017-12-13 |
NetGain Systems Enterprise Manager TFtpServer Filename Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-5119 |
NetGain Systems |
CVE-2017-16596 |
7.8 |
2017-12-13 |
NetGain Systems Enterprise Manager designer.script_005fsamples_jsp type Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-5118 |
NetGain Systems |
CVE-2017-16595 |
7.8 |
2017-12-13 |
NetGain Systems Enterprise Manager reports.export_005fdownload_jsp filename Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-5117 |
NetGain Systems |
CVE-2017-16594 |
9.3 |
2017-12-13 |
NetGain Systems Enterprise Manager db.save_005fimage_jsp id Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-5104 |
NetGain Systems |
CVE-2017-16593 |
7.8 |
2017-12-13 |
NetGain Systems Enterprise Manager restore.del_005fdo_jsp filenames Directory Traversal Denial of Service Vulnerability |
|||
ZDI-CAN-5103 |
NetGain Systems |
CVE-2017-16592 |
7.8 |
2017-12-13 |
NetGain Systems Enterprise Manager common.download_jsp filename Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-5100 |
NetGain Systems |
CVE-2017-16591 |
7.8 |
2017-12-13 |
NetGain Systems Enterprise Manager restore.download_005fdo_jsp Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-5099 |
NetGain Systems |
CVE-2017-16590 |
7.8 |
2017-12-13 |
NetGain Systems Enterprise Manager MainFilter doFilter Authentication Bypass Vulnerability |
|||
ZDI-CAN-5080 |
NetGain Systems |
CVE-2017-17407 |
7.5 |
2017-12-13 |
Netgain Systems Enterprise Manager script_test Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4753 |
NetGain Systems |
CVE-2017-17406 |
7.5 |
2017-12-13 |
NetGain Enterprise Manager RMI Registry Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4751 |
NetGain Systems |
CVE-2017-16610 |
7.5 |
2017-12-13 |
NetGain Enterprise Manager upload_save_do Remote Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-4750 |
NetGain Systems |
CVE-2017-16609 |
5.0 |
2017-12-13 |
NetGain Enterprise Manager download Arbitrary File Download Vulnerability |
|||
ZDI-CAN-4749 |
NetGain Systems |
CVE-2017-16608 |
7.5 |
2017-12-13 |
NetGain Enterprise Manager exec Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4718 |
NetGain Systems |
CVE-2017-16607 |
5.0 |
2017-12-13 |
NetGain Enterprise Manager heapdumps Remote Download Information Disclosure Vulnerability |
|||
ZDI-CAN-5242 |
Microsoft |
CVE-2017-11901 |
7.5 |
2017-12-12 |
Microsoft Windows JavaScript Array JIT Optimization Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5243 |
Microsoft |
CVE-2017-11913 |
4.3 |
2017-12-12 |
Microsoft Windows VBScript VT_BSTR Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-5111 |
Microsoft |
CVE-2017-11887 |
5.0 |
2017-12-12 |
Microsoft Windows VBScript VT_BSTR Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-5110 |
Microsoft |
CVE-2017-11887 |
4.3 |
2017-12-12 |
Microsoft Windows VBScript Join Function Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-5116 |
Bitdefender |
CVE-2017-17410 |
6.8 |
2017-12-12 |
Bitdefender Internet Security Emulator 0x102 Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-5102 |
Bitdefender |
CVE-2017-17409 |
6.8 |
2017-12-12 |
Bitdefender Internet Security Emulator 0x10A Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5101 |
Bitdefender |
CVE-2017-17408 |
6.8 |
2017-12-12 |
Bitdefender Internet Security Themida Emulator Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5203 |
Adobe |
CVE-2017-11250 |
4.3 |
2018-01-10 |
Adobe Acrobat Pro DC ImageConversion EMF EMR_ALPHABLEND Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4951 |
Advantech |
CVE-2017-12719 |
6.8 |
2017-12-06 |
Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-4950 |
Advantech |
CVE-2017-12719 |
6.8 |
2017-12-06 |
Advantech WebAccess webvrpcs drawsrv Untrusted Pointer Dereference Remote Code Execution Vulnerability |
|||
ZDI-CAN-4949 |
Advantech |
CVE-2017-14016 |
6.8 |
2017-12-06 |
Advantech WebAccess webvrpcs ViewDll1 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4986 |
Cisco |
CVE-2017-12371 |
6.8 |
2017-12-06 |
Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4988 |
Cisco |
CVE-2017-12370 |
6.8 |
2017-12-06 |
Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4989 |
Cisco |
CVE-2017-12370 |
6.8 |
2017-12-06 |
Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4990 |
Cisco |
CVE-2017-12370 |
6.8 |
2017-12-06 |
Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5041 |
Cisco |
CVE-2017-12372 |
6.8 |
2017-12-06 |
Cisco WebEx Network Recording Player Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-5009 |
Cisco |
CVE-2017-12371 |
6.8 |
2017-12-06 |
Cisco WebEx ARF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4987 |
Cisco |
CVE-2017-12371 |
6.8 |
2017-12-06 |
Cisco WebEx Recorder and Player WRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4914 |
Cisco |
CVE-2017-12371 |
6.8 |
2017-12-06 |
Cisco WebEx ARF File Parsing Uninitialized Memory Remote Code Execution Vulnerability |
|||
ZDI-CAN-5320 |
Microsoft |
CVE-2017-11884 |
6.8 |
2017-12-06 |
Microsoft Office Excel XLS File Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5114 |
Microsoft |
CVE-2017-11812 |
7.5 |
2017-12-06 |
Microsoft Chakra asm.js ArrayBuffer Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4756 |
Adobe |
CVE-2017-16369 |
4.3 |
2017-11-21 |
Adobe Acrobat Pro DC iframe Same Origin Policy Bypass Information Disclosure Vulnerability |
|||
ZDI-CAN-4891 |
Adobe |
CVE-2017-11304 |
4.3 |
2017-11-20 |
Adobe Photoshop JPEG2000 Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-4927 |
Apple |
CVE-2017-13833 |
4.4 |
2017-11-20 |
Apple macOS nsurlstoraged Integer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4908 |
Apple |
CVE-2017-13829 |
4.4 |
2017-11-20 |
Apple macOS nsurlstoraged Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-5076 |
systemd |
CVE-2017-15908 |
7.8 |
2017-11-20 |
systemd Network Name Resolution Manager NSEC Resource Record Pseudo-Types Denial of Service Vulnerability |
|||
ZDI-CAN-4856 |
ThinPrint |
CVE-2017-4935 |
6.2 |
2017-11-20 |
ThinPrint TPView JPEG2000 Parsing Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-4909 |
VMware |
CVE-2017-4934 |
6.2 |
2017-11-21 |
VMware Workstation NAT IP Fragment Reassembly Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-5096 |
Apple |
CVE-2017-13793 |
6.8 |
2017-11-20 |
Apple Safari Node Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5070 |
EMC |
CVE-2017-14375 |
4.3 |
2017-11-20 |
EMC Unisphere For VMAX vApp Manager ORBServlet Remote Credential Creation Information Disclosure Vulnerability |
|||
ZDI-CAN-4918 |
Cisco |
CVE-2017-12285 |
6.4 |
2017-11-20 |
Cisco Prime Network Analysis Module graph sfile Parameter Directory Traversal Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-5131 |
Microsoft |
CVE-2017-11851 |
5.4 |
2017-11-20 |
Microsoft Windows EngLockSurface Time-Of-Check Time-Of-Use Race Condition Information Disclosure Vulnerability |
|||
ZDI-CAN-5112 |
Microsoft |
CVE-2017-11869 |
6.8 |
2017-11-20 |
Microsoft Windows VBScript Join Function Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5105 |
Microsoft |
CVE-2017-11878 |
5.1 |
2017-11-20 |
Microsoft Office Excel Workbook Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5077 |
Microsoft |
CVE-2017-11856 |
7.5 |
2017-11-20 |
Microsoft Windows JavaScript Array Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4912 |
Microsoft |
CVE-2017-8595 |
6.8 |
2017-11-20 |
Microsoft Chakra Spread Operator Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5198 |
Microsoft |
CVE-2017-11858 |
5.1 |
2017-11-20 |
Microsoft Chakra Regular Expression Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5086 |
Microsoft |
CVE-2017-11847 |
7.2 |
2017-11-20 |
Microsoft Windows win32k Menu Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-5221 |
Adobe |
CVE-2017-16402 |
4.3 |
2017-11-14 |
Adobe Reader DC JPEG2000 QCC Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5220 |
Adobe |
CVE-2017-16400 |
4.3 |
2017-11-14 |
Adobe Reader DC JPEG2000 ihdr Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5219 |
Adobe |
CVE-2017-16401 |
4.3 |
2017-11-14 |
Adobe Acrobat Pro DC ImageConversion EMF EMR_COMMENT Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5218 |
Adobe |
CVE-2017-16404 |
6.8 |
2017-11-14 |
Adobe Acrobat Pro DC ImageConversion EMF EmfPlusObject Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5202 |
Adobe |
CVE-2017-16403 |
4.3 |
2017-11-14 |
Adobe Acrobat Pro DC ImageConversion EMF EmfPlusDrawBeziers Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5039 |
Adobe |
CVE-2017-16382 |
4.3 |
2017-11-14 |
Adobe Acrobat Pro DC XPS TIFF Rational Data Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5036 |
Adobe |
CVE-2017-16385 |
6.8 |
2017-11-14 |
Adobe Acrobat Pro DC XPS TIFF PhotometricInterpretation Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-5040 |
Adobe |
CVE-2017-16381 |
6.8 |
2017-11-14 |
Adobe Acrobat Pro DC XPS TIFF dir Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-5034 |
Adobe |
CVE-2017-16386 |
4.3 |
2017-11-14 |
Adobe Acrobat Pro DC XPS JPEG APP13 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5037 |
Adobe |
CVE-2017-16384 |
4.3 |
2017-11-14 |
Adobe Acrobat Pro DC XPS PNG tEXT Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5038 |
Adobe |
CVE-2017-16383 |
6.8 |
2017-11-14 |
Adobe Acrobat Pro DC XPS JPEG APP2 Parsing Heap-based Buffer Overflow Vulnerability |
|||
ZDI-CAN-4972 |
Adobe |
CVE-2017-16387 |
4.3 |
2017-11-14 |
Adobe Reader DC JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5296 |
Foxit |
CVE-2017-16587 |
6.8 |
2017-11-14 |
Foxit Reader removeField Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5295 |
Foxit |
CVE-2017-16586 |
6.8 |
2017-11-14 |
Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5294 |
Foxit |
CVE-2017-16585 |
6.8 |
2017-11-14 |
Foxit Reader App response Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5290 |
Foxit |
CVE-2017-16584 |
4.3 |
2017-11-14 |
Foxit Reader util printf Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5289 |
Foxit |
CVE-2017-16583 |
6.8 |
2017-11-14 |
Foxit Reader XFA datasets Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5288 |
Foxit |
CVE-2017-16582 |
6.8 |
2017-11-14 |
Foxit Reader clearItems Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5282 |
Foxit |
CVE-2017-16581 |
6.8 |
2017-11-14 |
Foxit Reader Document author Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5281 |
Foxit |
CVE-2017-16580 |
4.3 |
2017-11-14 |
Foxit Reader XFA ImageField Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5244 |
Foxit |
CVE-2017-16579 |
4.3 |
2017-11-14 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5216 |
Foxit |
CVE-2017-16578 |
6.8 |
2017-11-14 |
Foxit Reader XFA picture Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5094 |
Foxit |
CVE-2017-16577 |
6.8 |
2017-11-14 |
Foxit Reader Field alignment Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5092 |
Foxit |
CVE-2017-16576 |
6.8 |
2017-11-14 |
Foxit Reader XFA field element Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5091 |
Foxit |
CVE-2017-16575 |
6.8 |
2017-11-14 |
Foxit Reader XFA bind Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5079 |
Foxit |
CVE-2017-16574 |
4.3 |
2017-11-14 |
Foxit Reader Image Filter Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5078 |
Foxit |
CVE-2017-16573 |
4.3 |
2017-11-14 |
Foxit Reader LZWDecode filter Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5073 |
Foxit |
CVE-2017-16572 |
6.8 |
2017-11-14 |
Foxit Reader FormCalc closeDoc Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5072 |
Foxit |
CVE-2017-16571 |
6.8 |
2017-11-14 |
Foxit Reader FormCalc app Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5029 |
Foxit |
CVE-2017-14837 |
6.8 |
2017-11-14 |
Foxit Reader XFA Layout pageSpan Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5028 |
Foxit |
CVE-2017-14836 |
6.8 |
2017-11-14 |
Foxit Reader Annotations modDate Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5027 |
Foxit |
CVE-2017-14835 |
6.8 |
2017-11-14 |
Foxit Reader XFA Layout page Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5026 |
Foxit |
CVE-2017-14834 |
6.8 |
2017-11-14 |
Foxit Reader FileAttachment Annotations style Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5025 |
Foxit |
CVE-2017-14833 |
6.8 |
2017-11-14 |
Foxit Reader Text Annotations style Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5024 |
Foxit |
CVE-2017-14832 |
6.8 |
2017-11-14 |
Foxit Reader Caret Annotations style Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5023 |
Foxit |
CVE-2017-14831 |
6.8 |
2017-11-14 |
Foxit Reader Circle Annotations author Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-5022 |
Foxit |
CVE-2017-14830 |
6.8 |
2017-11-14 |
Foxit Reader XFAScriptObject setFocus Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5021 |
Foxit |
CVE-2017-14829 |
6.8 |
2017-11-14 |
Foxit Reader XFAScriptObject openList Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5020 |
Foxit |
CVE-2017-14828 |
6.8 |
2017-11-14 |
Foxit Reader XFA Layout w Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5019 |
Foxit |
CVE-2017-14827 |
6.8 |
2017-11-14 |
Foxit Reader XFA Nodes append Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5018 |
Foxit |
CVE-2017-14826 |
6.8 |
2017-11-14 |
Foxit Reader XFA Nodes formNodes Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5017 |
Foxit |
CVE-2017-14825 |
6.8 |
2017-11-14 |
Foxit Reader XFAScriptObject remove Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5016 |
Foxit |
CVE-2017-14824 |
6.8 |
2017-11-14 |
Foxit Reader XFAScriptObject insert Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5015 |
Foxit |
CVE-2017-14823 |
6.8 |
2017-11-14 |
Foxit Reader XFA Signature Object signer Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5014 |
Foxit |
CVE-2017-14822 |
4.3 |
2017-11-14 |
Foxit Reader JPEG2000 SIZ marker xOsiz Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5013 |
Foxit |
CVE-2017-14821 |
4.3 |
2017-11-14 |
Foxit Reader JPEG2000 SIZ marker xTsiz Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5012 |
Foxit |
CVE-2017-14820 |
4.3 |
2017-11-14 |
Foxit Reader JPEG2000 SOT tile index Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5011 |
Foxit |
CVE-2017-14819 |
4.3 |
2017-11-14 |
Foxit Reader JPEG2000 cdef channel number Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4982 |
Foxit |
CVE-2017-14818 |
4.3 |
2017-11-14 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4981 |
Foxit |
CVE-2017-10959 |
6.8 |
2017-11-14 |
Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4980 |
Foxit |
CVE-2017-10958 |
6.8 |
2017-11-14 |
Foxit Reader Field value Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4979 |
Foxit |
CVE-2017-10957 |
6.8 |
2017-11-14 |
Foxit Reader Annotations arrowEnd Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4978 |
Foxit |
CVE-2017-10956 |
4.3 |
2017-11-14 |
Foxit Reader JPEG2000 SOT marker tile index Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4977 |
Foxit |
CVE-2017-16589 |
4.3 |
2017-11-29 |
Foxit Reader JPEG2000 SIZ marker yTsiz Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4976 |
Foxit |
CVE-2017-16588 |
4.3 |
2017-11-29 |
Foxit Reader JPEG2000 SOT marker Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4810 |
Hewlett Packard Enterprise |
CVE-2017-8962 |
9.0 |
2017-11-06 |
Hewlett Packard Enterprise Intelligent Management Center perfAccessMgrServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4811 |
Hewlett Packard Enterprise |
CVE-2017-8963 |
9.0 |
2017-11-06 |
Hewlett Packard Enterprise Intelligent Management Center TopoReqServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4812 |
Hewlett Packard Enterprise |
CVE-2017-8964 |
9.0 |
2017-11-06 |
Hewlett Packard Enterprise Intelligent Management Center TopoBroadcastServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4813 |
Hewlett Packard Enterprise |
CVE-2017-8967 |
9.0 |
2017-11-06 |
Hewlett Packard Enterprise Intelligent Management Center TopoDebugServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4814 |
Hewlett Packard Enterprise |
CVE-2017-8965 |
9.0 |
2017-11-06 |
Hewlett Packard Enterprise Intelligent Management Center AccessMgrServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4815 |
Hewlett Packard Enterprise |
CVE-2017-8966 |
9.0 |
2017-11-06 |
Hewlett Packard Enterprise Intelligent Management Center TopoMsgServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4758 |
Hewlett Packard Enterprise |
CVE-2017-8961 |
9.0 |
2017-11-06 |
Hewlett Packard Enterprise Intelligent Management Center flexFileUpload Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-5115 |
Microsoft |
CVE-2017-11812 |
7.5 |
2017-10-11 |
Microsoft Chakra asm.js ArrayBuffer Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4948 |
Microsoft |
CVE-2017-11790 |
2.6 |
2017-10-11 |
Microsoft Office Excel xls File Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5207 |
Microsoft |
CVE-2017-11779 |
6.8 |
2017-10-10 |
Microsoft Windows DNSAPI NSEC3_RecordRead Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5199 |
Microsoft |
CVE-2017-8689 |
7.2 |
2017-10-10 |
Microsoft Windows Submenu Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-5084 |
Microsoft |
CVE-2017-11800 |
7.5 |
2017-10-10 |
Microsoft Chakra Array JIT Optimization Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5069 |
Microsoft |
CVE-2017-11781 |
6.8 |
2017-10-10 |
Microsoft Windows SMB Out-Of-Bounds Read Denial of Service Vulnerability |
|||
ZDI-CAN-5059 |
Microsoft |
CVE-2017-11794 |
4.3 |
2017-10-10 |
Microsoft Edge substringData Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-4967 |
Microsoft |
CVE-2017-11762 |
2.6 |
2017-10-10 |
Microsoft Windows Font Embedding Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4702 |
Microsoft |
CVE-2017-8717 |
6.8 |
2017-10-10 |
Microsoft Windows XLS File Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4669 |
Microsoft |
CVE-2017-8718 |
6.8 |
2017-10-10 |
Microsoft Windows XLS File Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-5130 |
Microsoft |
5.0 |
2017-10-06 |
(0Day) Microsoft Windows WAV File Uninitialized Pointer Denial of Service Vulnerability |
||||
ZDI-CAN-4635 |
Cisco |
CVE-2017-12263 |
7.8 |
2017-10-04 |
Cisco License Manager Server ReportCSV Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4896 |
Hewlett Packard Enterprise |
CVE-2017-12561 |
10.0 |
2017-10-03 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10012 Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4809 |
Hewlett Packard Enterprise |
CVE-2017-12560 |
6.8 |
2017-10-03 |
Hewlett Packard Enterprise Intelligent Management Center mibFileServlet Directory Traversal Denial of Service Vulnerability |
|||
ZDI-CAN-4808 |
Hewlett Packard Enterprise |
CVE-2017-12559 |
6.8 |
2017-10-03 |
Hewlett Packard Enterprise Intelligent Management Center mibFileServlet Directory Traversal Denial of Service Vulnerability |
|||
ZDI-CAN-4761 |
Hewlett Packard Enterprise |
CVE-2017-12558 |
10.0 |
2017-10-03 |
Hewlett Packard Enterprise Intelligent Management Center WebDMServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4760 |
Hewlett Packard Enterprise |
CVE-2017-12557 |
10.0 |
2017-10-03 |
Hewlett Packard Enterprise Intelligent Management Center WebDMDebugServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4759 |
Hewlett Packard Enterprise |
CVE-2017-12556 |
10.0 |
2017-10-03 |
Hewlett Packard Enterprise Intelligent Management Center MibBrowserTopoFilterServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4837 |
Hewlett Packard Enterprise |
CVE-2017-12554 |
9.0 |
2017-10-03 |
Hewlett Packard Enterprise Intelligent Management Center mibFileServlet Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-5071 |
Trend Micro |
CVE-2017-14088 |
6.9 |
2017-09-27 |
Trend Micro OfficeScan tmwfp Memory Corruption Privilege Escalation Vulnerability |
|||
ZDI-CAN-5068 |
Trend Micro |
CVE-2017-14088 |
6.9 |
2017-09-27 |
Trend Micro OfficeScan tmwfp Memory Corruption Privilege Escalation Vulnerability |
|||
ZDI-CAN-4754 |
Dell EMC |
CVE-2017-8007 |
9.0 |
2017-09-26 |
Dell EMC VNX Monitoring and Reporting Scheduler Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-4807 |
Dell EMC |
CVE-2017-8012 |
6.8 |
2017-09-26 |
Dell EMC VNX Monitoring and Reporting RMI Registry Deserialization of Untrusted Data Denial of Service Vulnerability |
|||
ZDI-CAN-4825 |
Hewlett Packard Enterprise |
CVE-2017-14350 |
10.0 |
2017-09-26 |
Hewlett Packard Enterprise Application Performance Management Staging Data Replicator hpbsmsdr Missing Authentication for Critical Function Remote Code Execution Vulnerability |
|||
ZDI-CAN-4955 |
Apple |
CVE-2017-7111 |
6.8 |
2017-09-26 |
Apple Safari RegExp replace Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-4771 |
Apple |
CVE-2017-7095 |
6.8 |
2017-09-26 |
Apple Safari JSString Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-4717 |
Apple |
CVE-2017-7091 |
6.8 |
2017-09-26 |
Apple Safari RenderFlowThread Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-4712 |
Apple |
CVE-2017-7092 |
6.8 |
2017-09-26 |
Apple Safari String link Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4711 |
Apple |
CVE-2017-7093 |
6.8 |
2017-09-26 |
Apple Safari BoundFunction Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-4553 |
Eaton |
7.5 |
2017-09-26 |
(0Day) Eaton ELCSoft SegCmt Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4637 |
Eaton |
7.5 |
2017-09-26 |
(0Day) Eaton ELCSoft LAD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4636 |
Eaton |
7.5 |
2017-09-26 |
(0Day) Eaton ELCSoft SFC File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability |
||||
ZDI-CAN-4555 |
Eaton |
7.5 |
2017-09-26 |
(0Day) Eaton ELCSoft DEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4554 |
Eaton |
7.5 |
2017-09-26 |
(0Day) Eaton ELCSoft EPC File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability |
||||
ZDI-CAN-4551 |
Eaton |
7.5 |
2017-09-26 |
(0Day) Eaton ELCSoft EPC File Parsing Out-Of-Bounds Access Remote Code Execution Vulnerability |
||||
ZDI-CAN-4552 |
Eaton |
7.5 |
2017-09-26 |
(0Day) Eaton ELCSoft Device Comment Range Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4697 |
EMC |
CVE-2017-10955 |
9.0 |
2017-09-28 |
(0Day) EMC Data Protection Advisor ScheduledReportResource Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4699 |
EMC |
CVE-2017-8013 |
7.8 |
2017-09-15 |
EMC Data Protection Advisor Application Service Static Credentials Authentication Bypass Vulnerability |
|||
ZDI-CAN-4683 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_moveto_group_list Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4679 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise delete_admin_account UserName SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4806 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise add_app_category Name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4805 |
Trend Micro |
CVE-2017-14079 |
6.5 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise upload_img_file Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-4804 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise eas_agent_check_upgrade SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4803 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise eas_agent_sync_client_info SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4802 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise eas_agent_sync_all_devices SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4801 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise eas_agent_unregister SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4800 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise eas_agent_upload_new_devices SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4799 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise eas_agent_command SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4797 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise eas_agent_register SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4796 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise cancel_command_list CmdUUID SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4794 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise delete_user Id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4793 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise remove_command_list CmdUUID SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4792 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise resend_command_list CmdUUID SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4791 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise edit_eas_note Id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4790 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise save_eas_agent_setting SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4788 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise remove_eas_agent_info SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4787 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise show_eas_agent_info SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4786 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise create_db SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4785 |
Trend Micro |
CVE-2017-14079 |
6.5 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise upload_font_file Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-4784 |
Trend Micro |
CVE-2017-14079 |
6.5 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise upload_wallpaper_file Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-4783 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise mdm_register_new_connector SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4782 |
Trend Micro |
CVE-2017-14078 |
10.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise diagnose_eas_status SlinkId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4781 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise reinvite_user Id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4780 |
Trend Micro |
CVE-2017-14079 |
6.5 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise upload_app_file Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-4779 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise assign_policy Id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4693 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise remote_selective_wipe_device id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4692 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_dep_profile Id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4691 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise upload_web_app AppFile SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4690 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise invite_devices user_name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4688 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise update_group Id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4687 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise delete_group ParentId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4686 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise remote_lock_device Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4685 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise export_devices Device_DeviceGroupId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4682 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_subgroup_list id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4681 |
Trend Micro |
CVE-2017-14081 |
6.5 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise Proxy Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4680 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise notify_devices_to_update id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4678 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_device_detail_info id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4677 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise query_user search_by SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4676 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_device_list_brief_by_group id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4673 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise search_device_invitations user_name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4672 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise edit_user id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4671 |
Trend Micro |
CVE-2017-14080 |
7.5 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise widgetforsecurity talker Authentication Bypass Vulnerability |
|||
ZDI-CAN-4670 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise change_device_user id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4668 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise reset_device_passwd id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4667 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_remote_unlockstring Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4666 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_user_list LDAPAccount SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4665 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise move_group Id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4664 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise query_installed_applications application_name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4663 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise edit_device id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4662 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise locate_device id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4661 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise search_user_for_report user_name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4660 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise get_device_location Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4659 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise search_users_for_vpp user_name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4658 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise query_event_log AdminName SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4657 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise add_group Name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4656 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise remote_wipe_device id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4655 |
Trend Micro |
CVE-2017-14081 |
6.5 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise Proxy Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4654 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise broadcast_group GroupId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4653 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise search_devices group_id SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4652 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise invite_devices email SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4651 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise stop_mirroring Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4650 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise change_ios_setting Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4649 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise export_eas_devices Domain SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4648 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise broadcast_devices Device_DeviceDeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4647 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise notify_groups_to_update DeviceGroupId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4646 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise delete_devices Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4645 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise show_eas_devices Domain SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4644 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise move_devices Device_DeviceDeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4643 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise notify_devices_to_scan Device_DeviceDeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4642 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise notify_groups_to_scan DeviceGroupId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4857 |
VMware |
CVE-2017-4924 |
6.2 |
2017-09-15 |
VMware Workstation Shader Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-4778 |
Trend Micro |
CVE-2017-14078 |
9.0 |
2017-09-15 |
Trend Micro Mobile Security for Enterprise change_user Device_DeviceId SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-5056 |
Microsoft |
CVE-2017-8738 |
7.5 |
2017-09-15 |
Microsoft Chakra Array Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-5082 |
Microsoft |
CVE-2017-8720 |
1.2 |
2017-09-15 |
Microsoft Windows PlgBlt Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4845 |
Microsoft |
CVE-2017-8692 |
4.3 |
2017-09-12 |
Microsoft Windows Uniscribe Bidirectional Text Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-5081 |
Microsoft |
CVE-2016-0165 |
6.2 |
2017-09-12 |
Microsoft Windows win32kfull Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4968 |
Microsoft |
CVE-2017-8743 |
6.8 |
2017-09-12 |
Microsoft Office PowerPoint ppt File Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4910 |
Microsoft |
CVE-2017-8738 |
7.5 |
2017-09-12 |
Microsoft Chakra Array Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4893 |
Microsoft |
CVE-2017-8744 |
6.8 |
2017-09-12 |
Microsoft Office Word WordPerfect Document Converter Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4885 |
Microsoft |
CVE-2017-8728 |
6.8 |
2017-09-15 |
Microsoft Windows PDF Library JPEG2000 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4844 |
Microsoft |
CVE-2017-8737 |
4.3 |
2017-09-12 |
Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4795 |
Microsoft |
CVE-2017-8631 |
6.8 |
2017-09-15 |
Microsoft Office Excel xlsb File Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4985 |
Microsoft |
CVE-2017-8750 |
6.8 |
2017-09-15 |
Microsoft Internet Explorer JavaScript WeakMap Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4888 |
Microsoft |
CVE-2017-8661 |
4.3 |
2017-09-12 |
Microsoft Edge Undo Command Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4708 |
Microsoft |
CVE-2017-8676 |
2.6 |
2017-09-12 |
Microsoft Windows Bitmap Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4710 |
EMC |
CVE-2017-8015 |
6.8 |
2017-09-12 |
EMC AppSync Apollo REST Services SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-4466 |
Hewlett Packard Enterprise |
CVE-2017-13983 |
6.8 |
2017-09-07 |
Hewlett Packard Enterprise Application Performance Management System Health Authentication Bypass Vulnerability |
|||
ZDI-CAN-4456 |
Hewlett Packard Enterprise |
CVE-2017-13985 |
6.8 |
2017-09-07 |
Hewlett Packard Enterprise Application Performance Management System Health Email Servlet Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4457 |
Hewlett Packard Enterprise |
CVE-2017-13984 |
6.8 |
2017-09-07 |
Hewlett Packard Enterprise Application Performance Management System Health SHExportToExcel Servlet Directory Traversal Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-4455 |
Hewlett Packard Enterprise |
CVE-2017-13982 |
9.0 |
2017-09-07 |
Hewlett Packard Enterprise Application Performance Management System Health UploadManager Servlet Directory Traversal Unrestricted File Upload Vulnerability |
|||
ZDI-CAN-5030 |
Foxit |
CVE-2017-10953 |
6.8 |
2017-09-07 |
Foxit Reader XFA gotoURL Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4361 |
Bitdefender |
CVE-2017-10954 |
9.3 |
2017-09-06 |
Bitdefender Internet Security PDF Predictor Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4524 |
Hewlett Packard Enterprise |
CVE-2017-8994 |
7.5 |
2017-09-05 |
Hewlett Packard Enterprise Operations Orchestration Backwards Compatibility Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4563 |
Hewlett Packard Enterprise |
CVE-2017-8994 |
7.5 |
2017-09-05 |
Hewlett Packard Enterprise Operations Orchestration Central-Remoting Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4521 |
Apple |
CVE-2017-7071 |
6.8 |
2017-09-05 |
Apple Safari HTMLSlotElement Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4897 |
Advantech |
CVE-2017-12713 |
7.2 |
2017-08-30 |
Advantech WebAccess Product Installation File Access Control Modification Privilege Escalation Vulnerability |
|||
ZDI-CAN-4548 |
Advantech |
CVE-2017-12710 |
9.4 |
2017-08-30 |
Advantech WebAccess rmTemplate SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-4695 |
EMC |
CVE-2017-8003 |
6.8 |
2017-08-25 |
EMC Data Protection Advisor ScheduledReportResource Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4698 |
EMC |
CVE-2017-8002 |
6.8 |
2017-08-25 |
EMC Data Protection Advisor RequestHistoryResource orderby SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-4694 |
EMC |
CVE-2017-8002 |
6.8 |
2017-08-25 |
EMC Data Protection Advisor ReportQueueResource orderby SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-4696 |
EMC |
CVE-2017-8002 |
6.8 |
2017-08-25 |
EMC Data Protection Advisor BaseRestEntityResource orderby SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-4111 |
Delta Industrial Automation |
6.8 |
2017-08-24 |
(0Day) Delta Industrial Automation PMSoft Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4045 |
Delta Industrial Automation |
6.8 |
2017-08-24 |
(0Day) Delta Industrial Automation PMSoft Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4442 |
Delta Industrial Automation |
CVE-2018-7507 |
6.8 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-4441 |
Delta Industrial Automation |
CVE-2018-7507 |
5.1 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-4436 |
Delta Industrial Automation |
CVE-2018-7507 |
7.5 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-4440 |
Delta Industrial Automation |
CVE-2018-7507 |
7.5 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-4435 |
Delta Industrial Automation |
CVE-2018-7509 |
7.5 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-4428 |
Delta Industrial Automation |
CVE-2018-7509 |
7.5 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||
ZDI-CAN-4439 |
Delta Industrial Automation |
CVE-2018-7507 |
6.8 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-3917 |
Delta Industrial Automation |
CVE-2018-7494 |
7.5 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-4438 |
Delta Industrial Automation |
CVE-2018-7509 |
7.5 |
2017-08-24 |
2018-03-28 |
(0Day) Delta Industrial Automation WPLSoft dvp File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||
ZDI-CAN-4884 |
Microsoft |
CVE-2017-8496 |
6.8 |
2017-08-24 |
Microsoft Edge DOMAttrModified Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4174 |
SpiderControl |
CVE-2017-12694 |
7.8 |
2017-08-23 |
SpiderControl SCADA Webserver iniNet Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4194 |
SpiderControl |
CVE-2017-12707 |
6.8 |
2017-08-23 |
SpiderControl SCADA MicroBrowser StaticHTMLTagsFileName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4776 |
Bitdefender |
CVE-2017-10950 |
6.2 |
2017-08-17 |
Bitdefender Total Security bdfwfpf Kernel Driver Double Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4518 |
Foxit |
CVE-2017-10952 |
7.5 |
2017-08-17 |
(0Day) Foxit Reader saveAs Arbitrary File Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4724 |
Foxit |
CVE-2017-10951 |
6.8 |
2017-08-17 |
(0Day) Foxit Reader launchURL Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4880 |
Hewlett Packard Enterprise |
CVE-2017-12526 |
9.0 |
2017-08-14 |
Hewlett Packard Enterprise Intelligent Management Center wmiConfigContent Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4879 |
Hewlett Packard Enterprise |
CVE-2017-12525 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center index Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4878 |
Hewlett Packard Enterprise |
CVE-2017-12524 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center operatorGroupSelectContent Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4875 |
Hewlett Packard Enterprise |
CVE-2017-12523 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center guiDataDetail Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4873 |
Hewlett Packard Enterprise |
CVE-2017-12522 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center quickTemplateSelect Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4872 |
Hewlett Packard Enterprise |
CVE-2017-12521 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center userSelectPagingContent Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4871 |
Hewlett Packard Enterprise |
CVE-2017-12520 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center perfAddorModDeviceMonitor Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4870 |
Hewlett Packard Enterprise |
CVE-2017-12519 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center faultEventSelectFactWithRecover Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4869 |
Hewlett Packard Enterprise |
CVE-2017-12518 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center operationSelect Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4868 |
Hewlett Packard Enterprise |
CVE-2017-12517 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center iccSelectDymicParam Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4864 |
Hewlett Packard Enterprise |
CVE-2017-12515 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center iccSelectRules Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4862 |
Hewlett Packard Enterprise |
CVE-2017-12514 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center devSoftSel Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4860 |
Hewlett Packard Enterprise |
CVE-2017-12513 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center perfSelectTask Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4859 |
Hewlett Packard Enterprise |
CVE-2017-12512 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center deviceThresholdConfig Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4874 |
Hewlett Packard Enterprise |
CVE-2017-12510 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center iccSelectDeviceSeries Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4853 |
Hewlett Packard Enterprise |
CVE-2017-12511 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center dnd Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4841 |
Hewlett Packard Enterprise |
CVE-2017-12499 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4877 |
Hewlett Packard Enterprise |
CVE-2017-12509 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center smsRulesDownload Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4876 |
Hewlett Packard Enterprise |
CVE-2017-12508 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center operatorGroupTreeSelectContent Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4867 |
Hewlett Packard Enterprise |
CVE-2017-12516 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center deploySelectBootrom Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4866 |
Hewlett Packard Enterprise |
CVE-2017-12507 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center deploySelectSoftware Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4865 |
Hewlett Packard Enterprise |
CVE-2017-12506 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center compareFilesResult Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4863 |
Hewlett Packard Enterprise |
CVE-2017-12505 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center iccSelectCommand Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4861 |
Hewlett Packard Enterprise |
CVE-2017-12504 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center iccSelectDevType Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4858 |
Hewlett Packard Enterprise |
CVE-2017-12503 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center templateSelect Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4850 |
Hewlett Packard Enterprise |
CVE-2017-12502 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center reportTaskSelect Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4849 |
Hewlett Packard Enterprise |
CVE-2017-12501 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center select Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4848 |
Hewlett Packard Enterprise |
CVE-2017-12500 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center ictExpertDownload Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4839 |
Hewlett Packard Enterprise |
CVE-2017-12498 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center customTemplateSelect Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4852 |
Hewlett Packard Enterprise |
CVE-2017-12497 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center deviceSelect Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4851 |
Hewlett Packard Enterprise |
CVE-2017-12496 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center sshConfig Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4840 |
Hewlett Packard Enterprise |
CVE-2017-12495 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center selectUserGroup Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4838 |
Hewlett Packard Enterprise |
CVE-2017-12494 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center mediaForAction Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4904 |
Hewlett Packard Enterprise |
CVE-2017-12493 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center queryCustomCondition Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4903 |
Hewlett Packard Enterprise |
CVE-2017-12492 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center saveSelectedInterfaces Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4902 |
Hewlett Packard Enterprise |
CVE-2017-12491 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center safeSelectedDevices Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4901 |
Hewlett Packard Enterprise |
CVE-2017-12490 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center perfSelInsServer Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4900 |
Hewlett Packard Enterprise |
CVE-2017-12489 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center perfInsListServer Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4899 |
Hewlett Packard Enterprise |
CVE-2017-12488 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center perfSelItemServer Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4898 |
Hewlett Packard Enterprise |
CVE-2017-12487 |
9.0 |
2017-08-11 |
Hewlett Packard Enterprise Intelligent Management Center perfAddFormServer Expression Language Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4407 |
Bitdefender |
6.8 |
2017-08-11 |
Bitdefender Internet Security RAR STM Record Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4360 |
Bitdefender |
6.8 |
2017-08-11 |
Bitdefender Internet Security Inno File Locations Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4359 |
Bitdefender |
6.8 |
2017-08-11 |
Bitdefender Internet Security Inno Header Strings Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4406 |
Bitdefender |
6.8 |
2017-08-11 |
Bitdefender Internet Security NSIS Sections Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4021 |
Fuji Electric |
CVE-2017-9662 |
4.4 |
2017-08-10 |
Fuji Electric Monitouch V-SFT Insecure Configuration Privilege Escalation Vulnerability |
|||
ZDI-CAN-3994 |
Fuji Electric |
CVE-2017-9660 |
6.8 |
2017-08-10 |
Fuji Electric Monitouch V-SFT Project File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4014 |
Fuji Electric |
CVE-2017-9659 |
6.8 |
2017-08-10 |
Fuji Electric Monitouch V-SFT Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3993 |
Fuji Electric |
CVE-2017-9659 |
6.8 |
2017-08-10 |
Fuji Electric Monitouch V-SFT Project File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4127 |
Adobe |
CVE-2017-11274 |
6.8 |
2017-08-09 |
Adobe Digital Editions ePub Font Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4826 |
Microsoft |
CVE-2017-8641 |
6.8 |
2017-08-08 |
Microsoft Chakra eval Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4777 |
Microsoft |
CVE-2017-8653 |
5.1 |
2017-08-08 |
Microsoft Internet Explorer SVG Layout Uninitialized Memory Remote Code Execution Vulnerability |
|||
ZDI-CAN-4770 |
Microsoft |
CVE-2017-8633 |
2.6 |
2017-08-08 |
Microsoft Windows Error Reporting Manager Improper Access Control Privilege Escalation Vulnerability |
|||
ZDI-CAN-4405 |
Microsoft |
CVE-2017-0250 |
5.1 |
2017-08-08 |
Microsoft Windows Jet Engine Library Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4461 |
Microsoft |
CVE-2017-8503 |
3.7 |
2017-08-08 |
Microsoft Edge XAML File Improper Access Control Privilege Escalation Vulnerability |
|||
ZDI-CAN-4484 |
Microsoft |
CVE-2017-0293 |
6.8 |
2017-08-08 |
Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4773 |
Microsoft |
CVE-2017-8624 |
6.9 |
2017-08-08 |
Microsoft Windows CLFS Driver Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4762 |
Adobe |
CVE-2017-3085 |
4.3 |
2017-08-08 |
Adobe Flash URL Redirect Information Disclosure Vulnerability |
|||
ZDI-CAN-4887 |
Adobe |
CVE-2017-11231 |
6.8 |
2017-08-08 |
Adobe Acrobat Reader DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4883 |
Adobe |
CVE-2017-11265 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4881 |
Adobe |
CVE-2017-11256 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC XFA AFLayoutInfo Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4854 |
Adobe |
CVE-2017-11255 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4847 |
Adobe |
CVE-2017-11271 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-4843 |
Adobe |
CVE-2017-11256 |
6.8 |
2017-08-09 |
Adobe Acrobat Pro DC XFA PDEContent Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4842 |
Adobe |
CVE-2017-11257 |
6.8 |
2017-08-09 |
Adobe Acrobat Pro DC XFA nodes Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4836 |
Adobe |
CVE-2017-11261 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4835 |
Adobe |
CVE-2017-11270 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4834 |
Adobe |
CVE-2017-11259 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4833 |
Adobe |
CVE-2017-11269 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4832 |
Adobe |
CVE-2017-11268 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4831 |
Adobe |
CVE-2017-11267 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-4830 |
Adobe |
CVE-2017-11259 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4829 |
Adobe |
CVE-2017-11258 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4827 |
Adobe |
CVE-2017-11261 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4828 |
Adobe |
CVE-2017-11260 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4823 |
Adobe |
CVE-2017-11233 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4764 |
Adobe |
CVE-2017-11249 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4821 |
Adobe |
CVE-2017-11232 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4820 |
Adobe |
CVE-2017-11231 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC PDF Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4819 |
Adobe |
CVE-2017-11252 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4818 |
Adobe |
CVE-2017-11230 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4817 |
Adobe |
CVE-2017-11228 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC JPEG2000 Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-4769 |
Adobe |
CVE-2017-11251 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4767 |
Adobe |
CVE-2017-11244 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4766 |
Adobe |
CVE-2017-11216 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4765 |
Adobe |
CVE-2017-11227 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4822 |
Adobe |
CVE-2017-11242 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4763 |
Adobe |
CVE-2017-11248 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4748 |
Adobe |
CVE-2017-11246 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4747 |
Adobe |
CVE-2017-11245 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4746 |
Adobe |
CVE-2017-11244 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4734 |
Adobe |
CVE-2017-11243 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC XSLT Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4733 |
Adobe |
CVE-2017-3121 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4732 |
Adobe |
CVE-2017-11242 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4731 |
Adobe |
CVE-2017-11241 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4730 |
Adobe |
CVE-2017-3122 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4729 |
Adobe |
CVE-2017-11239 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4728 |
Adobe |
CVE-2017-11239 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4727 |
Adobe |
CVE-2017-11238 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4726 |
Adobe |
CVE-2017-11237 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4725 |
Adobe |
CVE-2017-11236 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC Forms Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4720 |
Adobe |
CVE-2017-11235 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4719 |
Adobe |
CVE-2017-11234 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4716 |
Adobe |
CVE-2017-11223 |
6.8 |
2017-08-08 |
Adobe Reader DC XFA closeDoc Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4715 |
Adobe |
CVE-2017-11224 |
6.8 |
2017-08-08 |
Adobe Reader DC XFA loadXML Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4572 |
Adobe |
CVE-2017-11217 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4571 |
Adobe |
CVE-2017-11219 |
6.8 |
2017-08-08 |
Adobe Reader DC XFA topInset Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4570 |
Adobe |
CVE-2017-11216 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4569 |
Adobe |
CVE-2017-3121 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4568 |
Adobe |
CVE-2017-11214 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4567 |
Adobe |
CVE-2017-3122 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4566 |
Adobe |
CVE-2017-11212 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4562 |
Adobe |
CVE-2017-11211 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4559 |
Adobe |
CVE-2017-11210 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4558 |
Adobe |
CVE-2017-11209 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion XPS Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4557 |
Adobe |
CVE-2017-3124 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion PCX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4556 |
Adobe |
CVE-2017-3123 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4534 |
Adobe |
CVE-2017-3122 |
4.3 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4502 |
Adobe |
CVE-2017-3121 |
6.8 |
2017-08-08 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4490 |
Adobe |
CVE-2017-11218 |
6.8 |
2017-08-08 |
Adobe Reader DC XFA Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4489 |
Adobe |
CVE-2017-3120 |
6.8 |
2017-08-08 |
Adobe Reader DC XFA Parsing Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4369 |
Adobe |
CVE-2017-3115 |
4.3 |
2017-08-08 |
Adobe Reader DC URL Parsing Insufficient Verification of Data Authenticity Information Disclosure Vulnerability |
|||
ZDI-CAN-4310 |
Adobe |
CVE-2017-3113 |
6.8 |
2017-08-08 |
Adobe Reader DC XFA exportAsXFAStr Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4128 |
Adobe |
CVE-2017-3091 |
4.3 |
2017-08-08 |
Adobe Digital Editions ePub JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4099 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaUsername Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4076 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media DeviceType 3 Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4102 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaPassword Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4080 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 PMSettingData3D Name Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4079 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 SetLangStringHex Out-of-bounds Access Remote Code Execution Vulnerability |
||||
ZDI-CAN-4082 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 PMSettingData3D Height Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4110 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT setCameraName Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4075 |
Advantech |
7.5 |
2017-08-07 |
2018-02-21 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 SetPaybackFilePath Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4086 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT createStream Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4085 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 PMSettingData3D Width Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4105 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaPassword Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4106 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaURL Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4077 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Saturation Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4074 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media GetMDInterval Out-Of-Bounds Access Remote Code Execution Vulnerability |
||||
ZDI-CAN-4109 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaURL Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4071 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Hue Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4098 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaPassword Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4108 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaPassword Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4068 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 SetPaybackFilePath Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4107 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaUsername Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4069 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Brightness Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4096 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess VideoDAQ SDFileEnum Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4081 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 PMSettingData3D Name Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4090 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT setGroupIp Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4089 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT startSoundRecord Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4072 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media ExecuteURLCommand Format String Remote Code Execution Vulnerability |
||||
ZDI-CAN-4083 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 PMSettingData3D Height Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4095 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess VideoDAQ SDFileDownload Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4097 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Caption Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4104 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaUsername Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4070 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Contrast Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4094 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess bwocxrun OpenUrlToBufferTimeout Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4092 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT CreateSound Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4093 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT CreateStream Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4088 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT getSectionValue createStream Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4073 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media SetMDInterval Out-Of-Bounds Access Remote Code Execution Vulnerability |
||||
ZDI-CAN-4078 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 SetLangString Out-of-bounds Access Remote Code Execution Vulnerability |
||||
ZDI-CAN-4087 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT startSoundRecord Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4084 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess RtspVapgDecoderNew2 PMSettingData3D Width Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4103 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaURL Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4091 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess TpMegaJVT Set_MD_Mode Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4100 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaURL Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4101 |
Advantech |
7.5 |
2017-08-07 |
(0Day) Advantech WebAccess nvA1Media Connect MediaUsername Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4211 |
Advantech |
5.0 |
2017-08-07 |
(0Day) Advantech WebAccess ExlViewer getTemplateDetailByName template SQL Injection Information Disclosure Vulnerability |
||||
ZDI-CAN-4459 |
Dell EMC |
CVE-2017-10949 |
7.8 |
2017-08-02 |
Dell Storage Manager EmWebsiteServlet Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4543 |
Trend Micro |
CVE-2017-11393 |
9.0 |
2017-11-29 |
Trend Micro OfficeScan Proxy Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4544 |
Trend Micro |
CVE-2017-11394 |
9.0 |
2017-08-02 |
Trend Micro OfficeScan Proxy Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4037 |
Eaton |
6.8 |
2017-08-07 |
(0Day) Eaton ELCSoft ELCSimulator Stack-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-3960 |
Eaton |
6.8 |
2017-08-07 |
(0Day) Eaton ELCSoft Project File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-3794 |
Mitsubishi Electric |
CVE-2017-9636 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BEMatsushita Driver Configuration TCP_IP_Address Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3795 |
Mitsubishi Electric |
CVE-2017-9636 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BEYaskawaSMC Driver Configuration IPAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3796 |
Mitsubishi Electric |
CVE-2017-9638 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BECMpi Driver Configuration ClockDevice Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3797 |
Mitsubishi Electric |
CVE-2017-9638 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BES7IsoTcp Driver Configuration ClockDevice Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3798 |
Mitsubishi Electric |
CVE-2017-9638 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BEMBSlave Driver Configuration CommErrIO Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3799 |
Mitsubishi Electric |
CVE-2017-9638 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BEModbus Driver Configuration ClockDevice Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3800 |
Mitsubishi Electric |
CVE-2017-9636 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BEGalil Driver Configuration IPAddress Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3801 |
Mitsubishi Electric |
CVE-2017-9636 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BECoDeSysARTI Driver Configuration IPAddress0 Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3802 |
Mitsubishi Electric |
CVE-2017-9636 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BEMicroLogix Driver Configuration TCP_IP_Address Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3808 |
Mitsubishi Electric |
CVE-2017-9638 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer BEComliSlave Driver Configuration Status_bit Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3803 |
Mitsubishi Electric |
CVE-2017-9638 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer SetupAlarm Font Property Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3804 |
Mitsubishi Electric |
CVE-2017-9634 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer Symbol xSize Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-3759 |
Mitsubishi Electric |
CVE-2017-9634 |
9.3 |
2017-08-01 |
Mitsubishi Electric E-Designer TxStaticString Col Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4768 |
Dell EMC |
CVE-2017-8011 |
9.0 |
2017-08-01 |
Dell EMC VNX Monitoring and Reporting Scheduler Static Credentials Remote Code Execution Vulnerability |
|||
ZDI-CAN-4745 |
Trend Micro |
CVE-2017-11392 |
6.5 |
2017-07-31 |
Trend Micro InterScan Messaging Security Proxy Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4350 |
Trend Micro |
CVE-2017-11382 |
7.8 |
2017-07-31 |
Trend Micro Deep Discovery Email Inspector kdump_setting Denial of Service Vulnerability |
|||
ZDI-CAN-4744 |
Trend Micro |
CVE-2017-11391 |
6.5 |
2017-07-31 |
Trend Micro InterScan Messaging Security Proxy Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4706 |
Trend Micro |
CVE-2017-11390 |
4.0 |
2017-07-31 |
Trend Micro Control Manager BasePageSessionExpire External Entity Processing Information Disclosure Vulnerability |
|||
ZDI-CAN-4684 |
Trend Micro |
CVE-2017-11389 |
6.8 |
2017-07-31 |
Trend Micro Control Manager cmdHandlerFileHandling Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-4638 |
Trend Micro |
CVE-2017-11388 |
6.0 |
2017-07-31 |
Trend Micro Control Manager RestfulServiceUtility.NET SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4639 |
Trend Micro |
CVE-2017-11388 |
6.0 |
2017-07-31 |
Trend Micro Control Manager RestfulServiceUtility.NET SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4512 |
Trend Micro |
CVE-2017-11387 |
5.0 |
2017-07-31 |
Trend Micro Control Manager Debug Level Authentication Bypass Information Disclosure Vulnerability |
|||
ZDI-CAN-4549 |
Trend Micro |
CVE-2017-11386 |
7.8 |
2017-08-02 |
Trend Micro Control Manager cmdHandlerNewReportScheduler SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4545 |
Trend Micro |
CVE-2017-11385 |
7.8 |
2017-08-02 |
Trend Micro Control Manager cmdHandlerStatusMonitor SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4561 |
Trend Micro |
CVE-2017-11384 |
7.8 |
2017-08-02 |
Trend Micro Control Manager cmdHandlerLicenseManager SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4560 |
Trend Micro |
CVE-2017-11383 |
7.8 |
2017-08-02 |
Trend Micro Control Manager cmdHandlerTVCSCommander SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4416 |
AlienVault |
10.0 |
2017-07-20 |
2018-02-09 |
AlienVault Unified Security Management nfcapd Process_ipfix_template_withdraw Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4641 |
EMC |
CVE-2017-4997 |
10.0 |
2017-07-19 |
EMC VMAX3 VASA Provider UploadConfigurator Unrestricted File Upload Remote Code Execution Vulnerability |
|||
ZDI-CAN-4798 |
Apple |
CVE-2017-7053 |
7.2 |
2017-07-19 |
Apple iTunes iPodService Privilege Escalation Vulnerability |
|||
ZDI-CAN-4707 |
Apple |
CVE-2017-7052 |
6.8 |
2017-07-19 |
Apple Safari Frame Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4713 |
Microsoft |
CVE-2017-0285 |
2.6 |
2017-07-14 |
Microsoft Windows OTL Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4612 |
Microsoft |
CVE-2017-8465 |
6.9 |
2017-07-12 |
(Pwn2Own) Microsoft Windows NtUserLinkDpiCursor Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4640 |
Adobe |
CVE-2017-3080 |
4.7 |
2017-07-12 |
Adobe Flash BrokerCreateFile Broker Method Information Disclosure Vulnerability |
|||
ZDI-CAN-4030 |
Fuji Electric |
CVE-2017-9639 |
6.8 |
2017-07-12 |
Fuji Electric V-Server VPR File Parsing Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-4368 |
Hewlett Packard Enterprise |
CVE-2017-8956 |
10.0 |
2017-08-07 |
Hewlett Packard Enterprise Intelligent Management Center dbman Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4426 |
Hewlett Packard Enterprise |
CVE-2017-8954 |
10.0 |
2017-08-07 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10005 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4425 |
Hewlett Packard Enterprise |
CVE-2017-8955 |
7.8 |
2017-08-07 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10006 Arbitrary File Deletion Denial of Service Vulnerability |
|||
ZDI-CAN-4380 |
Hewlett Packard Enterprise |
CVE-2017-8957 |
10.0 |
2017-08-07 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10005 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4894 |
Microsoft |
CVE-2017-8601 |
6.8 |
2017-07-11 |
Microsoft Chakra Array JIT Optimization Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4889 |
Microsoft |
CVE-2017-8601 |
6.8 |
2017-07-11 |
Microsoft Chakra Array JIT Optimization Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4886 |
Microsoft |
CVE-2017-8601 |
6.8 |
2017-07-11 |
Microsoft Chakra Typed Array JIT Optimization Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4895 |
Adobe |
CVE-2017-3100 |
6.8 |
2017-07-11 |
Adobe Flash Player BitmapData applyFilter Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-4577 |
Microsoft |
CVE-2017-8590 |
6.9 |
2017-07-11 |
(Pwn2Own) Microsoft Windows CLFS Driver Uninitialized Memory Privilege Escalation Vulnerability |
|||
ZDI-CAN-4775 |
Microsoft |
CVE-2017-8598 |
6.8 |
2017-08-01 |
Microsoft Windows JavaScript super Keyword Uninitialized Memory Remote Code Execution Vulnerability |
|||
ZDI-CAN-4633 |
Microsoft |
CVE-2017-8580 |
6.9 |
2017-07-31 |
(Pwn2Own) Microsoft Windows Palette Object Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4624 |
Microsoft |
CVE-2017-8578 |
6.9 |
2017-07-11 |
(Pwn2Own) Microsoft Windows PlgBlt Integer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4621 |
Microsoft |
CVE-2017-8577 |
6.9 |
2017-07-11 |
(Pwn2Own) Microsoft Windows GDI Region Object Uninitialized Memory Privilege Escalation Vulnerability |
|||
ZDI-CAN-4576 |
Microsoft |
CVE-2017-8486 |
2.1 |
2017-07-11 |
(Pwn2Own) Microsoft Windows win32kfull CopyOutputString Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4626 |
Microsoft |
CVE-2017-8467 |
7.2 |
2017-07-11 |
(Pwn2Own) Microsoft Windows fnHKINLPRECT Untrusted Pointer Dereference Privilege Escalation Vulnerability |
|||
ZDI-CAN-4630 |
Microsoft |
CVE-2017-8579 |
6.9 |
2017-07-11 |
(Pwn2Own) Microsoft Windows D3DKMTCreateAllocation Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4485 |
Microsoft |
CVE-2017-0291 |
6.8 |
2017-07-11 |
Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-4482 |
Microsoft |
CVE-2017-0291 |
4.3 |
2017-07-11 |
Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4481 |
Microsoft |
CVE-2017-0291 |
6.8 |
2017-07-11 |
Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-3706 |
Fatek Automation |
CVE-2017-6023 |
6.8 |
2017-07-11 |
Fatek Automation PLC Ethernet Module Configuration Tool Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4611 |
Microsoft |
CVE-2017-0236 |
6.8 |
2017-07-10 |
(Pwn2Own) Microsoft Chakra ArrayBuffer Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4603 |
Microsoft |
CVE-2017-8575 |
2.1 |
2017-07-10 |
(Pwn2Own) Microsoft Windows basicrender WarpKMEscape Information Disclosure Vulnerability |
|||
ZDI-CAN-4587 |
Google |
CVE-2017-5053 |
6.8 |
2017-07-10 |
(Pwn2Own) Google Chrome Array indexOf Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-4723 |
Foxit |
CVE-2017-10948 |
6.8 |
2017-07-07 |
Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4722 |
Foxit |
CVE-2017-10947 |
6.8 |
2017-07-07 |
Foxit Reader print Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4721 |
Foxit |
CVE-2017-10946 |
6.8 |
2017-07-07 |
Foxit Reader setItem Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4855 |
Foxit |
CVE-2017-10945 |
6.8 |
2017-07-07 |
Foxit Reader App alert Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4846 |
Foxit |
CVE-2017-10944 |
4.3 |
2017-07-07 |
Foxit Reader ObjStm Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4738 |
Foxit |
CVE-2017-10943 |
4.3 |
2017-07-07 |
Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4737 |
Foxit |
CVE-2017-10942 |
4.3 |
2017-07-07 |
Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4816 |
Foxit |
CVE-2017-10941 |
6.8 |
2017-07-07 |
Foxit Reader AFParseDateEx Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-3853 |
Joyent |
CVE-2017-10940 |
9.0 |
2017-07-07 |
Joyent Smart Data Center Docker API Zone Escape Privilege Escalation Vulnerability |
|||
ZDI-CAN-3703 |
Advantech |
CVE-2017-12705 |
6.8 |
2017-08-15 |
(0Day) Advantech WebOP Designer Project File Heap Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4602 |
Microsoft |
CVE-2017-8553 |
2.1 |
2017-06-27 |
(Pwn2Own) Microsoft Windows XPS Document Writer Uninitialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-4604 |
Microsoft |
CVE-2017-8576 |
6.9 |
2017-06-27 |
(Pwn2Own) Microsoft Windows WarpKMSubmitCommandVirtual Uninitialized Memory Privilege Escalation Vulnerability |
|||
ZDI-CAN-4344 |
Cisco |
CVE-2017-6636 |
7.8 |
2017-06-26 |
Cisco Prime Collaboration Provisioning Logs Directory Improper Access Control Information Disclosure Vulnerability |
|||
ZDI-CAN-4469 |
Cisco |
CVE-2017-6637 |
7.8 |
2017-06-26 |
Cisco Prime Collaboration Provisioning logconfigtracer Directory Traversal Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-4468 |
Cisco |
CVE-2017-6621 |
7.8 |
2017-06-26 |
Cisco Prime Collaboration Provisioning logconfigtracer Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4467 |
Cisco |
CVE-2017-6635 |
7.8 |
2017-06-26 |
Cisco Prime Collaboration Provisioning licensestatus Directory Traversal Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-4343 |
Cisco |
CVE-2017-6622 |
10.0 |
2017-06-26 |
Cisco Prime Collaboration Provisioning ScriptMgr Servlet Authentication Bypass Remote Code Execution Vulnerability |
|||
ZDI-CAN-4279 |
Cisco |
CVE-2017-6669 |
6.8 |
2017-06-23 |
Cisco WebEx Network Recording Player ARF File Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-4278 |
Cisco |
CVE-2017-6669 |
6.8 |
2017-06-23 |
Cisco WebEx Network Recording Player ARF File Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-4277 |
Cisco |
CVE-2017-6669 |
6.8 |
2017-06-23 |
Cisco WebEx Network Recording Player ARF File CImageList Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4537 |
Apple |
CVE-2017-2454 |
6.8 |
2017-06-22 |
Apple Safari Node Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-3833 |
Lepide |
9.3 |
2017-06-21 |
(0Day) Lepide LepideAuditor Suite Malicious Server Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3975 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddTabShapeEmptyPage Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3974 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddStringUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3973 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddIntUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3972 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddFloatUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3971 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite TKGIS RemoveShape Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3970 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite TKGIS FindPortFromIndex Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3890 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddDoubleUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3889 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddDateUserProperty AddDefaultPort Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3888 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddColorUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3887 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddBoolUserProperty Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3886 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW AddShapePoint Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3897 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite TKGIS CloneShape Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3896 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCSIMPLE PositionShape Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3885 |
UCanCode |
6.8 |
2017-08-30 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCHMI UpdateShapeGeo Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3884 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCUML SetShapeWithLabelShow Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3895 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDIAGRAM InsertShapePoint Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3893 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCPRINT FlashShape Untrusted Pointer Dreference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3907 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite TKDRAWCAD RotateShape Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3906 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCDRAW MoveShape Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3905 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER RotateFromCenter Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3894 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER MoveCenterTo Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3904 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER ScaleFromCenter Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3892 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER SelectShape Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3883 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER AddShapeWithoutUndo Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3882 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER UpdateControl Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3881 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER StartRichTextEdit Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-3880 |
UCanCode |
6.8 |
2017-06-21 |
(0Day) UCanCode E-XD++ Visualization Enterprise Suite UCCVIEWER Multiple Methods Untrusted Pointer Dereference Remote Code Execution Vulnerability |
||||
ZDI-CAN-4709 |
Apple |
CVE-2017-2530 |
6.8 |
2017-06-21 |
Apple Safari Element Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4376 |
Foxit |
6.8 |
2017-06-15 |
Foxit Reader JPXDecode stream Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-3879 |
Novell |
6.8 |
2017-06-14 |
Novell ZENworks Reporting Appliance Directory Traversal Arbitrary File Creation Vulnerability |
||||
ZDI-CAN-4701 |
Microsoft |
CVE-2017-0285 |
2.6 |
2017-06-13 |
Microsoft Windows OTL Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4705 |
Adobe |
CVE-2017-3082 |
6.8 |
2017-06-13 |
Adobe Flash LocaleID determinePreferredLocales Uninitialized Memory Remote Code Execution Vulnerability |
|||
ZDI-CAN-4704 |
Adobe |
CVE-2017-3084 |
6.8 |
2017-06-13 |
Adobe Flash AuditudeSettings clone Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4703 |
Adobe |
CVE-2017-3083 |
6.8 |
2017-06-13 |
Adobe Flash Profile Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4700 |
Microsoft |
CVE-2017-8532 |
2.6 |
2017-06-13 |
Microsoft Windows OTL Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4619 |
Microsoft |
CVE-2017-8466 |
6.9 |
2017-06-13 |
(Pwn2Own) Microsoft Windows NtUserLinkDpiCursor Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4590 |
Microsoft |
CVE-2017-8468 |
6.9 |
2017-06-13 |
(Pwn2Own) Microsoft Windows NtUserLinkDpiCursor Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4608 |
Microsoft |
CVE-2017-8465 |
6.9 |
2017-06-13 |
(Pwn2Own) Microsoft Windows NtUserLinkDpiCursor Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4573 |
Microsoft |
CVE-2017-8547 |
7.5 |
2017-06-13 |
Microsoft Internet Explorer InsertRow Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-4622 |
Microsoft |
CVE-2017-0296 |
6.9 |
2017-06-13 |
(Pwn2Own) Microsoft Windows TdxCreateTransportAddress Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4564 |
Adobe |
CVE-2017-3075 |
6.8 |
2017-06-13 |
Adobe Flash XML load Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4483 |
Microsoft |
CVE-2017-8460 |
4.3 |
2017-06-13 |
Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4480 |
Microsoft |
CVE-2017-0292 |
6.8 |
2017-06-13 |
Microsoft Windows PDF Library JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4065 |
Trend Micro |
6.9 |
2017-06-13 |
Trend Micro Maximum Security tmusa Time-Of-Check/Time-Of-Use Privilege Escalation Vulnerability |
||||
ZDI-CAN-4191 |
Trend Micro |
4.7 |
2017-06-13 |
Trend Micro Maximum Security tmusa Kernel Driver Untrusted Pointer Dereference Denial of Service Vulnerability |
||||
ZDI-CAN-3844 |
EMC |
CVE-2016-8211 |
5.0 |
2017-06-12 |
EMC Data Protection Advisor ImageServlet Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4342 |
Hewlett Packard Enterprise |
CVE-2017-8947 |
10.0 |
2017-06-12 |
Hewlett Packard Enterprise Universal CMDB UploadFileOnUIServerServlet Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-3648 |
Schneider Electric |
6.8 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder Local Privilege Escalation Vulnerability |
||||
ZDI-CAN-3582 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder Embedded Session ID Authentication Bypass Vulnerability |
||||
ZDI-CAN-3583 |
Schneider Electric |
5.0 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder css.inc Directory Traversal Information Disclosure Vulnerability |
||||
ZDI-CAN-3584 |
Schneider Electric |
5.0 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder runscript Directory Traversal Information Disclosure Vulnerability |
||||
ZDI-CAN-3580 |
Schneider Electric |
6.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder file_picker Directory Traversal Arbitrary File Upload Remote Code Execution Vulnerability |
||||
ZDI-CAN-3579 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder SOAP Request Remote SQL Command Execution Vulnerability |
||||
ZDI-CAN-3669 |
Schneider Electric |
5.0 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder Error Message Path Information Disclosure Vulnerability |
||||
ZDI-CAN-3670 |
Schneider Electric |
5.0 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder error Information Disclosure Vulnerability |
||||
ZDI-CAN-3631 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder editobject SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3644 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder xmlserver SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3630 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder track_getdata SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3652 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder nfcserver SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3653 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder localize SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3628 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder syslog_getdata SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3629 |
Schneider Electric |
10.0 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder track_import_export SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3649 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder HTTP Cookie SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3647 |
Schneider Electric |
6.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder editscript Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-3646 |
Schneider Electric |
7.8 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder message_simple_html reboot Parameter Denial of Service Vulnerability |
||||
ZDI-CAN-3632 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder loadtemplate SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3645 |
Schneider Electric |
7.8 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder sendmail email_attachment Parameter Absolute Path Traversal Information Disclosure Vulnerability |
||||
ZDI-CAN-3643 |
Schneider Electric |
7.5 |
2017-06-12 |
(0Day) Schneider Electric U.motion Builder Hard-Coded Password Remote Code Execution Vulnerability |
||||
ZDI-CAN-4772 |
Microsoft |
CVE-2017-0266 |
6.8 |
2017-05-30 |
Microsoft Windows JavaScript Array Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4583 |
Apple |
2.1 |
2017-05-30 |
(Pwn2Own) Apple macOS nsurlstoraged Null Pointer Dereference Denial of Service Vulnerability |
||||
ZDI-CAN-4596 |
Apple |
CVE-2017-7002 |
6.8 |
2017-05-30 |
(Pwn2Own) Apple Safari WebSQL matchinfo Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4595 |
Apple |
CVE-2017-7001 |
6.8 |
2017-05-30 |
(Pwn2Own) Apple Safari WebSQL offsets Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4594 |
Apple |
CVE-2017-7000 |
6.8 |
2017-05-30 |
(Pwn2Own) Apple Safari WebSQL snippet Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4591 |
Apple |
CVE-2017-6983 |
6.8 |
2017-05-30 |
(Pwn2Own) Apple Safari WebSQL optimize Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4221 |
Hewlett Packard Enterprise |
CVE-2017-8944 |
7.8 |
2017-05-18 |
Hewlett Packard Enterprise Cloud Optimizer DownloadServlet Information Disclosure Vulnerability |
|||
ZDI-CAN-4610 |
Apple |
CVE-2017-2543 |
6.9 |
2017-05-18 |
(Pwn2Own) Apple macOS AppleMultitouchDevice Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4609 |
Apple |
CVE-2017-2542 |
1.9 |
2017-05-18 |
(Pwn2Own) Apple macOS AppleMultitouchDevice Uninitialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-4598 |
Apple |
CVE-2017-2538 |
6.8 |
2017-05-18 |
(Pwn2Own) Apple Safari ProcessingInstruction Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4597 |
Apple |
CVE-2017-2539 |
4.3 |
2017-05-18 |
(Pwn2Own) Apple Safari WebGLRenderingContextBase drawElements Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4593 |
Apple |
CVE-2017-6991 |
4.3 |
2017-05-18 |
(Pwn2Own) Apple Safari WebSQL Type Confusion Information Disclosure Vulnerability |
|||
ZDI-CAN-4617 |
Apple |
CVE-2017-2546 |
7.2 |
2017-05-18 |
(Pwn2Own) Apple macOS smbfs Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-4582 |
Apple |
CVE-2017-2536 |
6.8 |
2017-05-18 |
(Pwn2Own) Apple Safari Spread Operator Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4580 |
Apple |
CVE-2017-2533 |
6.9 |
2017-05-18 |
(Pwn2Own) Apple macOS diskarbitrationd Time-Of-Check/Time-Of-Use Privilege Escalation Vulnerability |
|||
ZDI-CAN-4579 |
Apple |
CVE-2017-2535 |
6.9 |
2017-05-18 |
(Pwn2Own) Apple macOS authd Privilege Escalation Vulnerability |
|||
ZDI-CAN-4624 |
Apple |
CVE-2017-2548 |
4.4 |
2017-05-18 |
(Pwn2Own) Apple macOS WindowServer XSetWindowListBrightness Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-4623 |
Apple |
CVE-2017-2547 |
6.8 |
2017-05-18 |
(Pwn2Own) Apple Safari B3 Optimization Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-4592 |
Apple |
CVE-2017-2537 |
4.4 |
2017-05-18 |
(Pwn2Own) Apple macOS WindowServer Dragging Space Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4615 |
Apple |
CVE-2017-6990 |
1.9 |
2017-05-18 |
(Pwn2Own) Apple macOS HFS Uninitialized Memory Information Disclosure Privilege Escalation Vulnerability |
|||
ZDI-CAN-4614 |
Apple |
CVE-2017-2545 |
6.9 |
2017-05-15 |
(Pwn2Own) Apple macOS IOGraphic Use-After-Free Privilege Escalation Vulnerability |
|||
ZDI-CAN-4613 |
Apple |
CVE-2017-2544 |
6.8 |
2017-05-15 |
(Pwn2Own) Apple Safari Array concat Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4600 |
Apple |
CVE-2017-2541 |
4.4 |
2017-05-15 |
(Pwn2Own) Apple macOS WindowServer _XGetWindowMovementGroup Stack-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4599 |
Apple |
CVE-2017-2540 |
1.9 |
2017-05-15 |
(Pwn2Own) Apple macOS WindowServer _XGetConnectionPSN Information Disclosure Vulnerability |
|||
ZDI-CAN-4581 |
Apple |
CVE-2017-2534, CVE-2017-6977 |
4.6 |
2017-05-15 |
(Pwn2Own) Apple macOS speechsynthesisd Unsigned Dylib Loading Privilege Escalation Vulnerability |
|||
ZDI-CAN-4536 |
Apple |
CVE-2017-2506 |
6.8 |
2017-05-15 |
Apple Safari RenderElement Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4520 |
Apple |
CVE-2017-2526 |
6.8 |
2017-05-15 |
Apple Safari RenderInline Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4519 |
Apple |
CVE-2017-2525 |
6.8 |
2017-05-15 |
Apple Safari RenderLayer Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4387 |
Hewlett Packard Enterprise |
CVE-2017-5819 |
10.0 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4386 |
Hewlett Packard Enterprise |
CVE-2017-5818 |
7.8 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Arbitrary File Deletion Denial of Service Vulnerability |
|||
ZDI-CAN-4372 |
Hewlett Packard Enterprise |
CVE-2017-5817 |
10.0 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10007 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4367 |
Hewlett Packard Enterprise |
CVE-2017-5816 |
10.0 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10008 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4379 |
Hewlett Packard Enterprise |
CVE-2017-5821 |
10.0 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10006 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4378 |
Hewlett Packard Enterprise |
CVE-2017-5823 |
10.0 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10013 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4377 |
Hewlett Packard Enterprise |
CVE-2017-5822 |
7.8 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10010 Arbitrary File Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4373 |
Hewlett Packard Enterprise |
CVE-2017-5820 |
10.0 |
2017-05-15 |
Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10004 Command Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4550 |
Adobe |
CVE-2017-3040 |
4.3 |
2017-05-12 |
Adobe Reader DC PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4522 |
Bitdefender |
9.3 |
2017-05-11 |
Bitdefender Internet Security Dalvik Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4574 |
Bitdefender |
9.3 |
2017-05-11 |
Bitdefender Internet Security cevakrnl Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4362 |
Hewlett Packard Enterprise |
CVE-2017-5812 |
5.0 |
2017-05-11 |
Hewlett Packard Enterprise Network Automation PermissionFilter Authentication Bypass Vulnerability |
|||
ZDI-CAN-4219 |
Hewlett Packard Enterprise |
CVE-2017-5810 |
10.0 |
2017-05-11 |
Hewlett Packard Enterprise Network Automation RedirectServlet SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4217 |
Hewlett Packard Enterprise |
CVE-2017-5811 |
7.8 |
2017-05-11 |
Hewlett Packard Enterprise Network Automation TrueControl Management Engine Service FileServlet Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4629 |
Microsoft |
CVE-2017-0240 |
6.8 |
2017-05-10 |
(Pwn2Own) Microsoft Edge AudioBuffer Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4628 |
Microsoft |
CVE-2017-0240 |
4.3 |
2017-05-10 |
(Pwn2Own) Microsoft Edge AudioBuffer Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-4625 |
Microsoft |
CVE-2017-0238 |
6.8 |
2017-05-10 |
(Pwn2Own) Microsoft Chakra Array unshift Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4618 |
Microsoft |
CVE-2017-0228 |
6.8 |
2017-05-10 |
(Pwn2Own) Microsoft Chakra Array Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4585 |
Microsoft |
CVE-2017-0233 |
7.2 |
2017-05-10 |
2018-03-06 |
(Pwn2Own) Microsoft Edge WriteClassesOfCategory DLL Planting Sandbox Escape Vulnerability |
||
ZDI-CAN-4584 |
Microsoft |
CVE-2017-0234 |
6.8 |
2017-05-10 |
(Pwn2Own) Microsoft Edge ArrayBuffer Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4285 |
Microsoft |
CVE-2017-0226 |
4.4 |
2017-05-10 |
Microsoft Internet Explorer Enhanced Protected Mode Sandbox Escape Vulnerability |
|||
ZDI-CAN-4013 |
Advantech |
CVE-2017-7929 |
6.8 |
2017-05-04 |
Advantech WebAccess odbcPg4 Absolute Path Traversal File Denial of Service Vulnerability |
|||
ZDI-CAN-4578 |
Apple |
CVE-2017-2491 |
6.8 |
2017-05-04 |
(Pwn2Own) Apple Safari String replace Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4535 |
Mozilla |
CVE-2017-5448 |
5.1 |
2017-05-03 |
Mozilla Firefox ClearKeyDecryptor Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4477 |
Foxit |
6.8 |
2017-05-03 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4476 |
Foxit |
6.8 |
2017-05-03 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4538 |
Hewlett Packard Enterprise |
CVE-2017-5806 |
10.0 |
2017-05-03 |
Hewlett Packard Enterprise Intelligent Management Center imcwlandm SSID Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4539 |
Hewlett Packard Enterprise |
CVE-2017-5805 |
10.0 |
2017-05-03 |
Hewlett Packard Enterprise Intelligent Management Center imcwlandm UserName Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4507 |
Hewlett Packard Enterprise |
CVE-2017-5804 |
10.0 |
2017-05-03 |
Hewlett Packard Enterprise Intelligent Management Center imcwlandm Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4429 |
Google |
CVE-2017-5059 |
6.8 |
2017-05-02 |
Google Chrome List Item Marker Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4525 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader getAnnot Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4517 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Annotations lock Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4513 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Annotations style Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4515 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Annotations opacity Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4514 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Annotations arrowEnd Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4506 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader importAnXFDF Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4498 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Field setAction Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4494 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Link setAction Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4510 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader getURL Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4504 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader spawnPageFromTemplate Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4505 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Field insertItemAt Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4503 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader scroll Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4497 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader exportAsFDF Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4531 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader resetForm Use-After-Free Information Disclosure Vulnerability |
||||
ZDI-CAN-4530 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Field buttonSetCaption Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4527 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader response Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4528 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader Field getItemAt Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4526 |
Foxit |
6.8 |
2017-04-21 |
Foxit Reader addAnnot Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4388 |
ThinPrint |
CVE-2017-4911 |
6.2 |
2017-04-19 |
ThinPrint TPView JPEG2000 Parsing Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-4207 |
ThinPrint |
CVE-2017-4911 |
6.2 |
2017-04-19 |
ThinPrint TPView JPEG2000 Parsing Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-4205 |
ThinPrint |
CVE-2017-4911 |
6.2 |
2017-04-19 |
ThinPrint TPView JPEG2000 Parsing Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-4203 |
ThinPrint |
CVE-2017-4911 |
6.9 |
2017-04-19 |
ThinPrint TPView JPEG2000 Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4206 |
ThinPrint |
CVE-2017-4911 |
6.2 |
2017-04-19 |
ThinPrint TPView JPEG2000 Parsing Out-Of-Bounds Write Privilege Escalation Vulnerability |
|||
ZDI-CAN-4204 |
ThinPrint |
CVE-2017-4910 |
6.2 |
2017-04-19 |
ThinPrint TPView JPEG2000 Parsing Out-Of-Bounds Read Privilege Escalation Vulnerability |
|||
ZDI-CAN-4059 |
ThinPrint |
CVE-2017-4908 |
6.2 |
2017-04-19 |
ThinPrint TPView JPEG2000 Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-3988 |
Oracle |
CVE-2017-3230 |
7.5 |
2017-04-19 |
Oracle Fusion Middleware MapViewer FileUploaderServlet fileName Remote Code Execution Vulnerability |
|||
ZDI-CAN-4565 |
Adobe |
CVE-2017-2994 |
6.8 |
2017-04-19 |
Adobe Flash PSDKEvent Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4523 |
LAquis SCADA |
CVE-2017-6020 |
5.0 |
2017-04-12 |
LAquis SCADA Software Web Server Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4337 |
Microsoft |
CVE-2017-0155 |
7.2 |
2017-04-11 |
Microsoft Windows Font Object Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4218 |
Microsoft |
CVE-2017-0158 |
4.3 |
2017-04-11 |
Microsoft Windows ADO Array-Type Parameter Use-After-Free Information Disclosure Vulnerability |
|||
ZDI-CAN-4427 |
Trend Micro |
10.0 |
2017-04-11 |
Trend Micro Deep Discovery Email Inspector policy_setting Arbitrary File Upload Remote Code Execution Vulnerability |
||||
ZDI-CAN-4589 |
Adobe |
CVE-2017-3057 |
6.8 |
2017-08-01 |
(Pwn2Own) Adobe Reader DC Collab documentToStream Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4588 |
Adobe |
CVE-2017-3056 |
4.3 |
2017-08-01 |
(Pwn2Own) Adobe Reader DC util streamFromString Uninitialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-4575 |
Adobe |
CVE-2017-3055 |
6.8 |
2017-04-11 |
(Pwn2Own) Adobe Reader DC JPEG2000 Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4607 |
Adobe |
CVE-2017-3063 |
6.8 |
2017-08-01 |
(Pwn2Own) Adobe Flash NetStream Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4601 |
Adobe |
CVE-2017-3062 |
6.8 |
2017-04-11 |
(Pwn2Own) Adobe Flash TextField Attribute Array Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4460 |
Adobe |
CVE-2017-3053 |
4.3 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4486 |
Adobe |
CVE-2017-3052 |
4.3 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion EMF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4487 |
Adobe |
CVE-2017-3051 |
4.3 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4491 |
Adobe |
CVE-2017-3050 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion GIF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4496 |
Adobe |
CVE-2017-3049 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4488 |
Adobe |
CVE-2017-3048 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4495 |
Adobe |
CVE-2017-3047 |
6.8 |
2017-04-11 |
Adobe Reader DC Annotations Object Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4500 |
Adobe |
CVE-2017-3046 |
4.3 |
2017-04-11 |
Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4493 |
Adobe |
CVE-2017-3042 |
4.3 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4499 |
Adobe |
CVE-2017-3045 |
4.3 |
2017-04-11 |
Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4501 |
Adobe |
CVE-2017-3044 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4431 |
Adobe |
CVE-2017-3042 |
4.3 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4433 |
Adobe |
CVE-2017-3042 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4432 |
Adobe |
CVE-2017-3042 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4434 |
Adobe |
CVE-2017-3043 |
4.3 |
2017-04-11 |
Adobe Reader DC Collab shareFile Information Disclosure Vulnerability |
|||
ZDI-CAN-4395 |
Adobe |
CVE-2017-3036 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion PCX Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4374 |
Adobe |
CVE-2017-3035 |
6.8 |
2017-04-11 |
Adobe Reader DC XFA dashDotDot Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4355 |
Adobe |
CVE-2017-3034 |
6.8 |
2017-04-11 |
Adobe Reader DC XFA Array Index Integer Underflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4382 |
Adobe |
CVE-2017-3031 |
4.3 |
2017-04-11 |
Adobe Reader DC Nested Variables Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4384 |
Adobe |
CVE-2017-3033 |
4.3 |
2017-04-11 |
Adobe Reader DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4334 |
Adobe |
CVE-2017-3032 |
4.3 |
2017-04-11 |
Adobe Reader DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4381 |
Adobe |
CVE-2017-3031 |
4.3 |
2017-04-11 |
Adobe Reader DC XSLT Namespace Node Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4335 |
Adobe |
CVE-2017-3029 |
4.3 |
2017-04-11 |
Adobe Reader DC JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4336 |
Adobe |
CVE-2017-3028 |
6.8 |
2017-04-11 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4306 |
Adobe |
CVE-2017-3023 |
6.8 |
2017-04-11 |
Adobe Reader DC JPEG2000 Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4318 |
Adobe |
CVE-2017-3022 |
4.3 |
2017-04-11 |
Adobe Reader DC JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4202 |
Adobe |
CVE-2017-3021 |
6.8 |
2017-04-11 |
Adobe Reader DC JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4201 |
Adobe |
CVE-2017-3020 |
4.3 |
2017-04-11 |
Adobe Reader DC Weblink Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4212 |
Adobe |
CVE-2017-3019 |
6.8 |
2017-04-11 |
Adobe Reader DC PRC Parsing Out-Of-Bound Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-4533 |
Adobe |
CVE-2017-3060 |
4.3 |
2017-04-11 |
Adobe Flash SWF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4532 |
Adobe |
CVE-2017-3060 |
4.3 |
2017-04-11 |
Adobe Flash SWF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4443 |
Adobe |
CVE-2017-3059 |
6.8 |
2017-04-11 |
Adobe Flash AS2 New Opcode Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4448 |
Adobe |
CVE-2017-3058 |
6.8 |
2017-04-11 |
Adobe Flash ByteArray Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4511 |
Trend Micro |
7.5 |
2017-04-05 |
Trend Micro Control Manager cgiShowClientAdm Missing Authentication for Critical Function Vulnerability |
||||
ZDI-CAN-4242 |
Trend Micro |
8.5 |
2017-04-05 |
Trend Micro Smart Protection Server wcs_bwlists_handler Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4039 |
Adobe |
CVE-2017-3009 |
4.3 |
2017-04-05 |
Adobe Reader DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4452 |
Apple |
CVE-2017-2463 |
6.8 |
2017-03-30 |
Apple Safari RenderBox Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4586 |
Linux |
CVE-2017-7184 |
6.9 |
2017-03-30 |
(Pwn2Own) Linux Kernel XFRM Out-Of-Bounds Access Privilege Escalation Vulnerability |
|||
ZDI-CAN-4632 |
VMware |
CVE-2017-4904 |
6.9 |
2017-03-30 |
(Pwn2Own) VMware Workstation Uninitialized Memory Privilege Escalation Vulnerability |
|||
ZDI-CAN-4631 |
VMware |
CVE-2017-4905 |
4.9 |
2017-03-30 |
(Pwn2Own) VMware Workstation Uninitialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-4627 |
VMware |
CVE-2017-4903 |
6.9 |
2017-03-30 |
(Pwn2Own) VMware Workstation SVGA Uninitialized Memory Privilege Escalation Vulnerability |
|||
ZDI-CAN-4606 |
VMware |
CVE-2017-4902 |
6.9 |
2017-03-30 |
VMware Workstation SVGA Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4605 |
VMware |
CVE-2017-4902 |
6.9 |
2017-03-30 |
VMware Workstation SVGA Heap-based Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-4620 |
Mozilla |
CVE-2017-5428 |
6.8 |
2017-03-30 |
(Pwn2Own) Mozilla Firefox createImageBitmap Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4437 |
Trend Micro |
7.5 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance transparent_setting CRLF Injection Authentication Bypass Vulnerability |
||||
ZDI-CAN-4324 |
Trend Micro |
7.5 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance TestConfigure Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4304 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration datagateIPv6Changed Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4299 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration isMgntDHCPIPv6Changed Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4276 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance PacFileManagement delete_pac_files Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4267 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration hostname Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4262 |
Trend Micro |
4.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigBackup Information Disclosure Vulnerability |
||||
ZDI-CAN-4256 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setHostname Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4385 |
Trend Micro |
7.2 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance uihelper Privilege Escalation Vulnerability |
||||
ZDI-CAN-4315 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4303 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration manageIP6 Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4298 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration gateChanged Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4275 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration dataIP6Changed Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4266 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ContentCacheSSAction Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4261 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance PacFileManagement Unrestricted File Upload Remote Code Execution Vulnerability |
||||
ZDI-CAN-4255 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setMgmtIPConfig Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4375 |
Trend Micro |
7.5 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance DomainList TestingADKerberos Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4313 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ManagePatches untarPatchFile Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4302 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration mgmtPingChanged Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4296 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance DeploymentWizardAction GetClusterInfo Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4270 |
Trend Micro |
9.0 |
2017-03-30 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration dataPingChanged Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4265 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration primaryDNS6 Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4260 |
Trend Micro |
4.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance VerboseLog Directory Traversal Information Disclosure Vulnerability |
||||
ZDI-CAN-4254 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setMgmtIPConfig Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4326 |
Trend Micro |
10.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance LogSettingHandler doPostMountDevice Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4312 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ManagePatches rollbackPatch Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4301 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration mgmtIPv6Changed Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4295 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ReportHandler DoCmd Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4269 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration manageEth Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4264 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration isDHCP Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4258 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setDataIPConfig static IP Information Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4253 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ClusterManagement ChangeNodeSetting Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4471 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance config_date_time Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4325 |
Trend Micro |
7.5 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance WmiDCDetector getAdHost Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4311 |
Trend Micro |
4.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance LogDelete processRequest method Directory Traversal Denial of Service Vulnerability |
||||
ZDI-CAN-4300 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration mgnt_gateway6 Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4280 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration isDHCP6_data Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4268 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration proxyEthChanged Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4263 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ConfigIPNetwork saveNetworkConfiguration dataIPChanged Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4257 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setDataIPConfig DNS Information Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4243 |
Trend Micro |
9.0 |
2017-03-29 |
Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setDataIPConfig DHCP Information Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4057 |
Hewlett Packard Enterprise |
CVE-2017-5797 |
7.8 |
2017-03-29 |
Hewlett Packard Enterprise Intelligent Management Center Service Operation Manager Module FileDownloadServlet filePath Information Disclosure Vulnerability |
|||
ZDI-CAN-4454 |
Apple |
CVE-2017-2481 |
6.8 |
2017-03-28 |
Apple Safari ElementData Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4414 |
Apple |
CVE-2017-2430 |
6.8 |
2017-03-28 |
Apple macOS M4A Parsing Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4413 |
Apple |
CVE-2017-2462 |
6.8 |
2017-03-28 |
Apple macOS M4A Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4329 |
Apple |
CVE-2017-2432 |
6.8 |
2017-03-28 |
Apple macOS ImageIO JPEG Parsing Integer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4472 |
Trend Micro |
6.8 |
2017-03-22 |
Trend Micro InterScan Messaging Security Suite DetailReportAction Directory Traversal Information Disclosure Vulnerability |
||||
ZDI-CAN-4166 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet SpecialSpywarePolicyResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4116 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager AdHocQueryExportProcessing SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4155 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet IDTB_SV parameters SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4154 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet ID_HIDDEN_UG_STR SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4117 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager cgiCMUIDispatcher ScheduleDownloadSavedEnableList SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4115 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet ID_QUERY_COMMAND_TRACKING_ID SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4112 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager cgiCMUIDispatcher ManualDownloadResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4465 |
Adobe |
CVE-2017-3001 |
6.8 |
2017-03-21 |
Adobe Flash MovieClip transform Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4453 |
Adobe |
CVE-2017-3001 |
6.8 |
2017-03-21 |
Adobe Flash Transform matrix Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4447 |
Adobe |
CVE-2017-3001 |
6.8 |
2017-03-21 |
Adobe Flash BitmapData Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4446 |
Adobe |
CVE-2017-3001 |
6.8 |
2017-03-21 |
Adobe Flash Sound loadSound Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4445 |
Adobe |
CVE-2017-3001 |
6.8 |
2017-03-21 |
Adobe Flash TextFormat getTextExtent Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4444 |
Adobe |
CVE-2017-3001 |
6.8 |
2017-03-21 |
Adobe Flash AS2 RemoveClip Opcode Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4470 |
Microsoft |
CVE-2017-0067 |
5.1 |
2017-03-21 |
Microsoft Edge JavaScript Parsing Uninitialized Pointer Remote Code Execution Vulnerability |
|||
ZDI-CAN-4430 |
Microsoft |
CVE-2017-0015 |
4.3 |
2017-03-21 |
Microsoft Windows JavaScript Spread Operator Uninitialized Memory Information Disclosure Vulnerability |
|||
ZDI-CAN-4422 |
Microsoft |
CVE-2017-0032 |
6.8 |
2017-03-21 |
Microsoft Windows JavaScript Spread Operator Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4271 |
Microsoft |
CVE-2017-0094 |
6.8 |
2017-03-21 |
Microsoft Windows JavaScript Proxy Setter Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4058 |
Microsoft |
CVE-2017-0018 |
4.3 |
2017-03-21 |
Microsoft Internet Explorer CHtmTag Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4052 |
Microsoft |
CVE-2017-0047 |
6.9 |
2017-03-21 |
Microsoft Windows DrawIconEx Buffer Overflow Privilege Escalation Vulnerability |
|||
ZDI-CAN-3934 |
Microsoft |
CVE-2017-0011 |
2.6 |
2017-03-21 |
Microsoft Edge CTransitionValues Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4122 |
Hewlett Packard Enterprise |
CVE-2017-5790 |
10.0 |
2017-03-11 |
Hewlett Packard Enterprise Intelligent Management Center accessMgrServlet Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4053 |
Hewlett Packard Enterprise |
CVE-2017-5795 |
6.8 |
2017-03-11 |
Hewlett Packard Enterprise Intelligent Management Center FileDownloadServlet fileName Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4055 |
Hewlett Packard Enterprise |
CVE-2017-5794 |
9.0 |
2017-03-11 |
Hewlett Packard Enterprise Intelligent Management Center FileUploadServlet Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-4054 |
Hewlett Packard Enterprise |
CVE-2017-5793 |
9.0 |
2017-03-11 |
Hewlett Packard Enterprise Intelligent Management Center CommonUtils Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-4067 |
Hewlett Packard Enterprise |
CVE-2017-5792 |
7.5 |
2017-03-11 |
Hewlett Packard Enterprise Intelligent Management Center RMI Registry Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4056 |
Hewlett Packard Enterprise |
CVE-2017-5791 |
10.0 |
2017-03-11 |
Hewlett Packard Enterprise Intelligent Management Center UrlAccessController Filter Authentication Bypass Vulnerability |
|||
ZDI-CAN-3933 |
Hewlett Packard Enterprise |
CVE-2017-5789 |
6.8 |
2017-03-09 |
Hewlett Packard Enterprise LoadRunner libxdrutil mxdr_string Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4418 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector download_pdf Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4417 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector write_new_html_with_svg Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4366 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector network_dump Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4351 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector get_filesize Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4349 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector firewall_setting Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4347 |
Trend Micro |
7.8 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector reboot_after_hotfix Denial of Service Vulnerability |
||||
ZDI-CAN-4348 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector screenshot Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4346 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector ajax_checklicense_AC Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4333 |
Trend Micro |
10.0 |
2017-03-09 |
Trend Micro Deep Discovery Email Inspector db_export Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4529 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader Field buttonGetIcon Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4516 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader ePub Parsing Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4509 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader openDoc Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4508 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader Field deleteItemAt Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4479 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader PDB Parsing Memory Corruption Remote Code Execution Vulnerability |
||||
ZDI-CAN-4478 |
Foxit |
4.3 |
2017-03-09 |
Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4475 |
Foxit |
4.3 |
2017-03-09 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4464 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4463 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4462 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader execMenuItem Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4458 |
Foxit |
4.3 |
2017-03-09 |
Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4423 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader ePub Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-4330 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader XFA Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-4354 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader Pattern Out-Of-Bounds Read Remote Code Execution Vulnerability |
||||
ZDI-CAN-4353 |
Foxit |
6.8 |
2017-03-09 |
Foxit Reader Xref Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4365 |
Foxit |
4.3 |
2017-03-09 |
Foxit Reader PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4364 |
Foxit |
4.3 |
2017-03-09 |
Foxit Reader Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4363 |
Foxit |
4.3 |
2017-03-09 |
Foxit Reader ConvertToPDF TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4408 |
Trend Micro |
4.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise displayName_get SQL Injection Information Disclosure Vulnerability |
||||
ZDI-CAN-4409 |
Trend Micro |
4.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise count_ad_members SQL Injection Information Disclosure Vulnerability |
||||
ZDI-CAN-4410 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise restartService Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4411 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise rollback Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4412 |
Trend Micro |
4.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise get_device_info SQL Injection Information Disclosure Vulnerability |
||||
ZDI-CAN-4404 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise get_replacement Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4403 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise license Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4402 |
Trend Micro |
4.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise get_nic_device SQL Injection Information Disclosure Vulnerability |
||||
ZDI-CAN-4401 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise reconnect_nfs_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4400 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise reconnect_iscsi_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4399 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise reconnect_local_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4398 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise mount_local_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4397 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise mount_iscsi_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4396 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise replace_local_disk Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4394 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise dead_local_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4393 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise dead_iscsi_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4392 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise discovery_iscsi_device Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4391 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise save_local_config Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4390 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise save_iscsi_config Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4389 |
Trend Micro |
9.0 |
2017-03-01 |
Trend Micro SafeSync for Enterprise check_nfs_server_status Command Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3721 |
VIPA |
CVE-2017-5177 |
6.8 |
2017-02-28 |
VIPA Automation WinPLC7 recv Stack-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3920 |
Adobe |
CVE-2017-2939 |
6.8 |
2017-02-16 |
Adobe Acrobat Reader DC Memory Corruption Remote Code Execution Vulnerability |
|||
ZDI-CAN-4370 |
Adobe |
CVE-2017-2994 |
6.8 |
2017-02-14 |
Adobe Flash Player MediaPlayer Out-Of-Bounds Access Remote Code Execution Vulnerability |
|||
ZDI-CAN-4371 |
Adobe |
CVE-2017-2995 |
6.8 |
2017-02-14 |
Adobe Flash Player MessageChannel Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-3984 |
Adobe |
CVE-2017-2976 |
4.3 |
2017-02-14 |
Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-3983 |
Adobe |
CVE-2017-2975 |
4.3 |
2017-02-14 |
Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-3982 |
Adobe |
CVE-2017-2974 |
4.3 |
2017-02-14 |
Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-3981 |
Adobe |
CVE-2017-2981 |
4.3 |
2017-02-14 |
Adobe Digital Editions PDF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-3980 |
Adobe |
CVE-2017-2978 |
4.3 |
2017-02-14 |
Adobe Digital Editions PDF Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-3978 |
Adobe |
CVE-2017-2979 |
4.3 |
2017-02-14 |
Adobe Digital Editions FlateDecode Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-3977 |
Adobe |
CVE-2017-2977 |
4.3 |
2017-02-14 |
Adobe Digital Editions FlateDecode Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4345 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager cgiRedAlertStatusTracking SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4214 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet NotificationMethodResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4173 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager AdHocQuery_Result XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4172 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet CnCContactAlertResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4171 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet HighRiskDetectionResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4170 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet DLPIncidentStatusChangeResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4169 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet StealthProgramFoundResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4168 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet SHA1DenyDetectionResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4167 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet CorrelatedIncidentResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4165 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet DLPIncidentScheduleSummaryResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4164 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet VirtualAnalysisDetectionResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4163 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet KnownAttackDetectionResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4162 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet SuspiciousThreat parameters SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4161 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet ID_HIDDEN_RED_ALERT_TASK_ID SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4159 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet EmailMessageDetected parameters SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4160 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet CnC parameters SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4156 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet ThreatSentToWatchlistResult SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4158 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager ProductTree_TreeManagement1 XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4157 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager ProductTree_Table XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4153 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet IDTB_ Parameters SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4152 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet IDTB_GroupName SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4151 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager TreeUserControl_process_tree_event XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4150 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager ProductTree XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4149 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager CCGIServlet IDCB_SuspiciousThreat SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-4148 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager ProductTree_RightWindow XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4147 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager ProductTree_LeftWindow XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4140 |
Trend Micro |
4.0 |
2017-09-22 |
Trend Micro Control Manager DeploymentPlan_Event_Handler XML External Entity Processing Information Disclosure Vulnerability |
||||
ZDI-CAN-4113 |
Trend Micro |
4.3 |
2017-09-22 |
Trend Micro Control Manager ProgressReportCGI SQL Injection Authentication Bypass Vulnerability |
||||
ZDI-CAN-4114 |
Trend Micro |
6.0 |
2017-09-22 |
Trend Micro Control Manager cgiCMUIDispatcher Login Token SQL Injection Remote Code Execution Vulnerability |
||||
ZDI-CAN-3996 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-3997 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-3998 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager dlp_policy Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-3999 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4000 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4001 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager modDLPViolationCnt_drildown Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4002 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4003 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4004 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4005 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-4006 |
Trend Micro |
4.3 |
2017-02-07 |
Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability |
||||
ZDI-CAN-4007 |
Trend Micro |
4.3 |
2017-02-07 |
Trend Micro Control Manager download Directory Traversal Information Disclosure Vulnerability |
||||
ZDI-CAN-4008 |
Trend Micro |
6.8 |
2017-02-07 |
Trend Micro Control Manager importFile Directory Traversal Remote Code Execution Vulnerability |
||||
ZDI-CAN-3824 |
Ecava |
CVE-2016-8341 |
7.5 |
2017-02-07 |
Ecava IntegraXor getdata param SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-3849 |
Ecava |
CVE-2016-8341 |
7.5 |
2017-02-07 |
Ecava IntegraXor getdata name SQL Injection Remote Code Execution Vulnerability |
|||
ZDI-CAN-4018 |
Oracle |
CVE-2017-3289 |
6.8 |
2017-01-24 |
Oracle Java Uninitialized Memory Remote Code Execution Vulnerability |
|||
ZDI-CAN-3834 |
Oracle |
CVE-2017-3272 |
6.8 |
2017-01-24 |
Oracle Java AtomicReferenceFieldUpdater Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-3826 |
Oracle |
CVE-2017-3248 |
7.5 |
2017-01-24 |
Oracle WebLogic RMI Registry UnicastRef Object Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-4121 |
Apple |
CVE-2017-2354 |
6.8 |
2017-01-24 |
Apple Safari SearchInputType Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-3995 |
Samba |
CVE-2016-2123 |
6.8 |
2017-01-20 |
Samba NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4026 |
Brocade |
CVE-2016-8207 |
7.8 |
2017-01-20 |
Brocade Network Advisor CliMonitorReportServlet Directory Traversal Information Disclosure Vulnerability |
|||
ZDI-CAN-4025 |
Brocade |
CVE-2016-8206 |
9.4 |
2017-01-20 |
Brocade Network Advisor SoftwareImageUpload Directory Traversal Arbitrary File Deletion Vulnerability |
|||
ZDI-CAN-4024 |
Brocade |
CVE-2016-8205 |
10.0 |
2017-01-20 |
Brocade Network Advisor DashboardFileReceiveServlet Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-4023 |
Brocade |
CVE-2016-8204 |
10.0 |
2017-01-20 |
Brocade Network Advisor FileReceiveServlet Directory Traversal Remote Code Execution Vulnerability |
|||
ZDI-CAN-4358 |
Bitdefender |
6.8 |
2017-01-20 |
Bitdefender Internet Security NSIS Entries Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4357 |
Bitdefender |
6.8 |
2017-01-20 |
Bitdefender Internet Security NSIS Pages Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4356 |
Bitdefender |
6.8 |
2017-01-20 |
Bitdefender Internet Security SIS Parsing Integer Overflow Remote Code Execution Vulnerability |
||||
ZDI-CAN-4182 |
Adobe |
CVE-2017-2970 |
6.8 |
2017-01-20 |
Adobe Reader DC XSLT apply-templates Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-3936 |
Apache |
CVE-2016-6814 |
7.5 |
2017-12-27 |
Apache Groovy MethodClosure Deserialization of Untrusted Data Remote Code Execution Vulnerability |
|||
ZDI-CAN-3679 |
Advantech |
CVE-2017-5154, CVE-2017-5152 |
6.5 |
2017-01-12 |
Advantech WebAccess updateTemplate SQL Injection Information Disclosure Vulnerability |
|||
ZDI-CAN-4327 |
Foxit |
6.8 |
2017-01-11 |
Foxit PhantomPDF ConvertToPDF TIFF Parsing Memory Corruption Remote Code Execution Vulnerability |
||||
ZDI-CAN-4252 |
Foxit |
6.8 |
2017-01-11 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4251 |
Foxit |
4.3 |
2017-01-11 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4250 |
Foxit |
4.3 |
2017-01-11 |
Foxit PhantomPDF ConvertToPDF JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4249 |
Foxit |
6.8 |
2017-01-11 |
Foxit Reader setInterval Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4248 |
Foxit |
4.3 |
2017-01-11 |
Foxit Reader Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4247 |
Foxit |
4.3 |
2017-01-11 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4246 |
Foxit |
6.8 |
2017-01-11 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4245 |
Foxit |
6.8 |
2017-01-11 |
Foxit Reader alert Use-After-Free Remote Code Execution Vulnerability |
||||
ZDI-CAN-4323 |
Foxit |
4.3 |
2017-01-11 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
||||
ZDI-CAN-4322 |
Foxit |
6.8 |
2017-01-11 |
Foxit Reader JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
||||
ZDI-CAN-4317 |
Adobe |
CVE-2017-2967 |
6.8 |
2017-01-10 |
Adobe Reader DC XFA template Out-Of-Bounds Read Remote Code Execution Vulnerability |
|||
ZDI-CAN-4305 |
Adobe |
CVE-2017-2966 |
6.8 |
2017-01-10 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4185 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT call-template Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4180 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT element Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4308 |
Adobe |
CVE-2017-2963 |
4.3 |
2017-01-10 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4213 |
Adobe |
CVE-2017-2962 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT lang Type Confusion Remote Code Execution Vulnerability |
|||
ZDI-CAN-4209 |
Adobe |
CVE-2017-2961 |
6.8 |
2017-01-10 |
Acrobat Reader DC XFA Field Font Size Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4208 |
Adobe |
CVE-2017-2960 |
4.3 |
2017-01-10 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4200 |
Adobe |
CVE-2017-2959 |
6.8 |
2017-01-10 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4126 |
Adobe |
CVE-2017-2951 |
6.8 |
2017-01-10 |
Adobe Reader DC XFA hyphenation Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4125 |
Adobe |
CVE-2017-2950 |
6.8 |
2017-01-10 |
Adobe Reader DC XFA Layout Use-After-Free Remote Code Execution Vulnerability |
|||
ZDI-CAN-4197 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT decimal-format Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4198 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT namespace-alias Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4196 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT processing-instruction Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4195 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT function-available Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4183 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT sort Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4181 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT key Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4309 |
Adobe |
CVE-2017-2964 |
4.3 |
2017-01-10 |
Adobe Acrobat Pro DC ImageConversion JPEG Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4199 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT key Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4179 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT attribute Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4190 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT attribute-set Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4307 |
Adobe |
CVE-2017-2965 |
6.8 |
2017-01-10 |
Adobe Acrobat Pro DC ImageConversion TIFF Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability |
|||
ZDI-CAN-4184 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT format-number Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4186 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT output Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4189 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT variable Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4187 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT system-property Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4188 |
Adobe |
CVE-2017-2949 |
6.8 |
2017-01-10 |
Adobe Reader DC XSLT element-available Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4193 |
Adobe |
CVE-2017-2946 |
4.3 |
2017-01-10 |
Adobe Reader DC JPEG2000 Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-4192 |
Adobe |
CVE-2017-2946 |
6.8 |
2017-01-10 |
Adobe Reader DC JPEG2000 Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
|||
ZDI-CAN-4012 |
Adobe |
CVE-2017-2941 |
4.3 |
2017-01-10 |
Adobe Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability |
|||
ZDI-CAN-3836 |
Hewlett Packard Enterprise |
CVE-2016-8519 |
7.5 |
2017-01-10 |
Hewlett Packard Enterprise Operations Orchestration Backwards Compatibility Deserialization of Untrusted Data Remote Code Execution Vulnerability |