Latest CVE Feed
-
7.1
HIGHCVE-2017-2735
TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restr... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
5.3
MEDIUMCVE-2017-2712
S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping.... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12654
The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted file.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-12604
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread.... Read more
- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-2733
Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious ... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
5.4
MEDIUMCVE-2017-2713
HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An ... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12676
In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-2791
JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file. Due to the application incorrectly handling the error case for a function's result, the application will use this result in a poi... Read more
Affected Products : ichitaro- Published: Feb. 24, 2017
- Modified: Apr. 20, 2025
-
4.9
MEDIUMCVE-2017-2708
The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authenticat... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-12674
In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cause a denial of service.... Read more
Affected Products : imagemagick- Published: Aug. 07, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2697
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C1... Read more
Affected Products : y6ii_firmware gt3_firmware honor_5c_firmware knt_firmware p9_lite_firmware p9_lite y6ii gt3 honor_5c knt- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2716
The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege of the Android system and sends a specific parameter t... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-2707
Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-2711
P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-12434
In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause a denial of service (assertion failure) in DestroyImageInfo in image.c.... Read more
Affected Products : imagemagick- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-2698
The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given param... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
6.3
MEDIUMCVE-2017-12330
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient input validation of command arguments to the CLI parser. An attacker cou... Read more
- Published: Nov. 30, 2017
- Modified: Apr. 20, 2025
-
4.3
MEDIUMCVE-2017-1228
IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure cookie attribute. An attacker could exploit this vulnerability to obtain sensi... Read more
Affected Products : bigfix_platform- Published: Oct. 26, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-2699
The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs contai... Read more
- Published: Nov. 22, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12235
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (Do... Read more
Affected Products : ios industrial_ethernet_2000_series_firmware industrial_ethernet_2000_16ptc-g-e_switch industrial_ethernet_2000_16ptc-g-l_switch industrial_ethernet_2000_16ptc-g-nx_switch industrial_ethernet_2000_16t67-b_switch industrial_ethernet_2000_16t67p-g-e_switch industrial_ethernet_2000_16tc-g-e_switch industrial_ethernet_2000_16tc-g-l_switch industrial_ethernet_2000_16tc-g-n_switch +21 more products- Actively Exploited
- Published: Sep. 29, 2017
- Modified: Apr. 20, 2025