Поиск уязвимостей
Количество 35 049
Количество 35 049
CVE-2017-11548
The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service
CVE-2017-10989
The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact.
CVE-2017-1000256
CVE-2017-1000232
CVE-2017-1000118
CVE-2017-1000098
The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors.
CVE-2017-1000097
On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.
CVE-2017-1000085
Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality improperly checked permissions, allowing any user with Item/Build permission (but not Item/Configure) to connect to any web server or Subversion server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery attacks.
CVE-2017-0300
Windows Kernel Information Disclosure Vulnerability
CVE-2017-0299
Windows Kernel Information Disclosure Vulnerability
CVE-2017-0298
Windows COM Session Elevation of Privilege Vulnerability
CVE-2017-0297
Windows Kernel Elevation of Privilege Vulnerability
CVE-2017-0296
Windows TDX Elevation of Privilege Vulnerability
CVE-2017-0295
Windows Default Folder Tampering Vulnerability
CVE-2017-0294
Windows Remote Code Execution Vulnerability
CVE-2017-0293
Windows PDF Remote Code Execution Vulnerability
CVE-2017-0292
Windows PDF Remote Code Execution Vulnerability
CVE-2017-0291
Windows PDF Remote Code Execution
CVE-2017-0290
Microsoft Malware Protection Engine Remote Code Execution Vulnerability
CVE-2017-0289
Windows GDI Information Disclosure Vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-11548 The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service | CVSS3: 5.5 | 4% Низкий | около 1 года назад |
| CVE-2017-10989 The getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other products, mishandles undersized RTree blobs in a crafted database, leading to a heap-based buffer over-read or possibly unspecified other impact. | 9% Низкий | около 1 года назад | |
| CVSS3: 8.1 | 2% Низкий | около 6 лет назад | |
| CVSS3: 9.8 | 2% Низкий | больше 4 лет назад | |
| CVSS3: 7.5 | 1% Низкий | около 6 лет назад | |
| CVE-2017-1000098 The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors. | 2% Низкий | 3 месяца назад | |
| CVE-2017-1000097 On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate. | 1% Низкий | 9 месяцев назад | |
| CVE-2017-1000085 Subversion Plugin connects to a user-specified Subversion repository as part of form validation (e.g. to retrieve a list of tags). This functionality improperly checked permissions, allowing any user with Item/Build permission (but not Item/Configure) to connect to any web server or Subversion server and send credentials with a known ID, thereby possibly capturing them. Additionally, this functionality did not require POST requests be used, thereby allowing the above to be performed without direct access to Jenkins via Cross-Site Request Forgery attacks. | 1% Низкий | 2 дня назад | |
| CVE-2017-0300 Windows Kernel Information Disclosure Vulnerability | CVSS3: 4.7 | 5% Низкий | больше 9 лет назад |
| CVE-2017-0299 Windows Kernel Information Disclosure Vulnerability | CVSS3: 4.7 | 5% Низкий | больше 9 лет назад |
| CVE-2017-0298 Windows COM Session Elevation of Privilege Vulnerability | CVSS3: 6.6 | 2% Низкий | больше 9 лет назад |
| CVE-2017-0297 Windows Kernel Elevation of Privilege Vulnerability | CVSS3: 7 | 4% Низкий | больше 9 лет назад |
| CVE-2017-0296 Windows TDX Elevation of Privilege Vulnerability | CVSS3: 7 | 1% Низкий | больше 9 лет назад |
| CVE-2017-0295 Windows Default Folder Tampering Vulnerability | CVSS3: 4.8 | 1% Низкий | больше 9 лет назад |
| CVE-2017-0294 Windows Remote Code Execution Vulnerability | CVSS3: 8 | 17% Средний | больше 9 лет назад |
| CVE-2017-0293 Windows PDF Remote Code Execution Vulnerability | CVSS3: 3.6 | 14% Средний | больше 9 лет назад |
| CVE-2017-0292 Windows PDF Remote Code Execution Vulnerability | CVSS3: 3.6 | 24% Средний | больше 9 лет назад |
| CVE-2017-0291 Windows PDF Remote Code Execution | CVSS3: 3.6 | 20% Средний | больше 9 лет назад |
| CVE-2017-0290 Microsoft Malware Protection Engine Remote Code Execution Vulnerability | 81% Высокий | больше 9 лет назад | |
| CVE-2017-0289 Windows GDI Information Disclosure Vulnerability | CVSS3: 4.4 | 3% Низкий | больше 9 лет назад |
Уязвимостей на страницу