Latest CVE Feed
-
6.1
MEDIUMCVE-2017-1000043
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control... Read more
Affected Products : mapbox.js- EPSS Score: %0.16
- Published: Jul. 17, 2017
- Modified: Apr. 20, 2025
-
3.5
LOWCVE-2017-0895
Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users. Note that no actual content of the calendar and addressbook has been disclosed.... Read more
Affected Products : nextcloud_server- EPSS Score: %0.13
- Published: May. 08, 2017
- Modified: Apr. 20, 2025
-
5.4
MEDIUMCVE-2017-0890
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.... Read more
Affected Products : nextcloud_server- EPSS Score: %0.67
- Published: May. 08, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-0842
An elevation of privilege vulnerability in the Android system (bluetooth). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37502513.... Read more
Affected Products : android- EPSS Score: %0.04
- Published: Nov. 16, 2017
- Modified: Apr. 20, 2025
-
5.4
MEDIUMCVE-2017-1600
IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo... Read more
Affected Products : security_guardium- EPSS Score: %0.23
- Published: Dec. 20, 2017
- Modified: Apr. 20, 2025
-
5.9
MEDIUMCVE-2017-9576
The "Middleton Community Bank Mobile Banking" by Middleton Community Bank app 3.0.0 -- aka middleton-community-bank-mobile-banking/id721843238 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s... Read more
Affected Products : middleton_community_bank_mobile- EPSS Score: %0.12
- Published: Jun. 16, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-0790
A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37357704. References: B-V2017053101.... Read more
Affected Products : android- EPSS Score: %0.06
- Published: Sep. 08, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2015-5699
The Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands via shell metacharacters in a cl-rctl command label.... Read more
Affected Products : cumulus_linux- EPSS Score: %0.06
- Published: Oct. 22, 2017
- Modified: Apr. 20, 2025
-
7.2
HIGHCVE-2017-0705
A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-34973477. References: B-RB#119898.... Read more
Affected Products : android- EPSS Score: %0.05
- Published: Jul. 06, 2017
- Modified: Apr. 20, 2025
-
5.9
MEDIUMCVE-2015-5666
ANA App for Android 3.1.1 and earlier, and ANA App for iOS 3.3.6 and earlier does not verify SSL certificates.... Read more
Affected Products : all_nippon_airways- EPSS Score: %0.58
- Published: Sep. 25, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0684
A elevation of privilege vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35421151.... Read more
Affected Products : android- EPSS Score: %0.04
- Published: Jul. 06, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0675
A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227.... Read more
Affected Products : android- EPSS Score: %0.21
- Published: Jul. 06, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-0604
An elevation of privilege vulnerability in the kernel Qualcomm power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent ... Read more
Affected Products : android- EPSS Score: %0.04
- Published: May. 12, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2016-9051
An exploitable out-of-bounds write vulnerability exists in the batch transaction field parsing functionality of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause an out-of-bounds write resulting in memory corruption which can lead t... Read more
Affected Products : database_server- EPSS Score: %4.25
- Published: Feb. 21, 2017
- Modified: Apr. 20, 2025
-
7.6
HIGHCVE-2017-0581
An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privile... Read more
- EPSS Score: %0.25
- Published: Apr. 07, 2017
- Modified: Apr. 20, 2025
-
7.6
HIGHCVE-2017-0579
An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged pro... Read more
- EPSS Score: %0.25
- Published: Apr. 07, 2017
- Modified: Apr. 20, 2025
-
7.6
HIGHCVE-2017-0573
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged pro... Read more
- EPSS Score: %0.25
- Published: Apr. 07, 2017
- Modified: Apr. 20, 2025
-
4.7
MEDIUMCVE-2017-0535
An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. ... Read more
- EPSS Score: %0.26
- Published: Mar. 08, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2015-5469
Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary files via a full pathname in the file parameter to includes/download.php.... Read more
Affected Products : mdc_youtube_downloader- EPSS Score: %49.11
- Published: May. 23, 2017
- Modified: Apr. 20, 2025
-
7.6
HIGHCVE-2017-0458
An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged pr... Read more
- EPSS Score: %0.24
- Published: Mar. 08, 2017
- Modified: Apr. 20, 2025