Latest CVE Feed
-
5.3
MEDIUMCVE-2016-6083
IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696.... Read more
Affected Products : tivoli_monitoring- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-2843
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An att... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-2842
In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary data in the "msmtprc" configuration file resulting in command execution. An att... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-2841
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.37. A specially crafted HTTP request can allow for a user to inject arbitrary data in the "msm... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-7524
tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when generating HMAC.... Read more
Affected Products : tpm2.0-tools- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-7522
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.... Read more
Affected Products : openvpn- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
5.9
MEDIUMCVE-2017-7521
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().... Read more
Affected Products : openvpn- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.4
HIGHCVE-2017-7520
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.... Read more
Affected Products : openvpn- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-7508
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.... Read more
Affected Products : openvpn- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-9257
The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-9256
The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-9255
The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-9254
The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-9253
The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-9223
The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-9222
The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-9221
The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-9220
The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-9219
The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (memory allocation error and application crash) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-9218
The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted mp4 file.... Read more
- Published: Jun. 27, 2017
- Modified: Apr. 20, 2025