Latest CVE Feed
-
9.3
HIGHCVE-2017-10820
Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.... Read more
Affected Products : ip_messenger- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
5.9
MEDIUMCVE-2017-10819
MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communication.... Read more
Affected Products : malion- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-10818
MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection settings of Terminal Agent and spoof the Relay Service.... Read more
Affected Products : malion- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-10817
MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server.... Read more
Affected Products : malion- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-10816
SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server.... Read more
Affected Products : malion- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
8.1
HIGHCVE-2017-10815
MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when "Remote Control" is installed) allow remote attackers to bypass authentication to execute arbitrary commands or operations on Termi... Read more
Affected Products : malion- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12459
The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code ex... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12458
The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file.... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12457
The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file.... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12456
The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12455
The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12454
The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12453
The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12452
The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted m... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12451
The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds stack read via a ... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12450
The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution ... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12449
The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file.... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-12448
The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted... Read more
Affected Products : binutils- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-10949
Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459.... Read more
Affected Products : storage_manager_2016- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025
-
7.3
HIGHCVE-2017-11657
Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane directory.... Read more
Affected Products : dashlane- Published: Aug. 04, 2017
- Modified: Apr. 20, 2025