Latest CVE Feed
-
9.3
HIGHCVE-2017-15400
Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.... Read more
Affected Products : chrome_os- Published: Feb. 07, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-15325
The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-T... Read more
- Published: Mar. 23, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-15316
The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker tricks a user into installing a... Read more
- Published: Dec. 22, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-14743
Faleemi FSC-880 00.01.01.0048P2 devices allow unauthenticated SQL injection via the Username element in an XML document to /onvif/device_service, as demonstrated by reading the admin password.... Read more
- Published: Sep. 26, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-14176
Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands via a bzr+ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-9800, CVE-2017-12836, CVE-2017-12976, CVE-2017-16228, CV... Read more
- Published: Nov. 27, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-14115
The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH logins to the remotessh account with the 5SaP9I26 password, which allows remote attackers to access... Read more
- Published: Sep. 03, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-14020
In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-PGMSW) Versions 6.30 and prior; C-More Micro (Part Number EA-PGMSW) Versions 4.20.01.0 and prior; Do-more Designer ... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13904
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Apr. 03, 2018
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-13880
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An application may be able to execute arbitrary code with kernel privilege.... Read more
- Published: Dec. 23, 2021
- Modified: Nov. 21, 2024
-
9.3
HIGHCVE-2017-13876
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13872
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The issue involves the "Directory Utility" component. It allows attackers to obtain administrator access without a password via certain inter... Read more
- Published: Nov. 29, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13861
An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a privileged conte... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13847
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service ... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13848
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13862
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13829
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13858
An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app.... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13834
An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Kernel" component. It allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a cra... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13867
An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Dec. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-13799
An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbit... Read more
- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025