Latest CVE Feed
-
9.3
HIGHCVE-2017-14743
Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.... Read more
- Published: Sep. 26, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-14176
Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CV... Read more
- Published: Nov. 27, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-14115
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password, which allows remote attackers to access... Read more
- Published: Sep. 03, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-14020
In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer ... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13904
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Apr. 03, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-13880
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An application may be able to execute arbitrary code with kernel privilege.... Read more
- Published: Dec. 23, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-13876
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13872
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain administrator access without a password via certain inter... Read more
- Published: Nov. 29, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13861
An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged conte... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13847
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service ... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13848
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13862
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13829
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13858
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13834
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a cra... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13867
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13799
An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13830
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "HFS" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a craft... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13827
An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that performs kext loading.... Read more
- Published: Apr. 03, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-13838
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Sandbox" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a c... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025