Exploit Intelligence Platform

CVE-2017-0893 5.4 MEDIUM EPSS 0.00

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrusted user-input which suffered from a XSS vulnerability caused by a behaviour change in Safari 10.1 and 10.2. Note that Nextcloud employs a strict Content-Security-Policy preventing exploitation of this XSS issue on modern web browsers.

CWE-79 May 08, 2017

CVE-2017-0891 5.4 MEDIUM EPSS 0.00

Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilities in multiple components.

CWE-79 May 08, 2017

CVE-2017-0890 5.4 MEDIUM EPSS 0.00

Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

CWE-79 May 08, 2017

CVE-2017-8848 6.5 MEDIUM EPSS 0.00

Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.

CWE-352 May 08, 2017

CVE-2017-8847 5.5 MEDIUM EPSS 0.00

The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive.

CWE-476 May 08, 2017

CVE-2017-8846 5.5 MEDIUM EPSS 0.01

The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted archive.

CWE-416 May 08, 2017

CVE-2017-8845 5.5 MEDIUM EPSS 0.00

The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive.

CWE-125 May 08, 2017

CVE-2017-8843 5.5 MEDIUM EPSS 0.00

The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted archive.

CWE-476 May 08, 2017

CVE-2017-8842 5.5 MEDIUM EPSS 0.00

The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted archive.

CWE-369 May 08, 2017

CVE-2017-8833 6.1 MEDIUM EPSS 0.00

Zen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official release but the vendor's README.md file offers a link to v160.zip with a description of "Download latest in-development version from github."

CWE-79 May 08, 2017

CVE-2017-8832 6.1 MEDIUM 1 Writeup EPSS 0.00

Allen Disk 1.6 has XSS in the id parameter to downfile.php.

CWE-79 May 08, 2017

CVE-2017-8831 6.4 MEDIUM 1 Writeup EPSS 0.00

The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a "double fetch" vulnerability.

CWE-125 May 08, 2017

CVE-2017-8830 6.5 MEDIUM EPSS 0.00

In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted file.

CWE-772 May 08, 2017

CVE-2017-8391 5.5 MEDIUM EPSS 0.00

The OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1 places an encrypted password into a readable local file during operating system installation, which allows local users to obtain sensitive information by reading this file after operating system installation.

CWE-732 May 06, 2017

CVE-2017-6029 5.4 MEDIUM EPSS 0.00

A Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. This may allow remote code execution.

CWE-79 May 06, 2017

CVE-2017-6024 5.9 MEDIUM EPSS 0.00

A Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers V28.011, V28.012, and V28.013; ControlLogix 5580 controllers V29.011; CompactLogix 5380 controllers V28.011; and CompactLogix 5380 controllers V29.011. This vulnerability may allow an attacker to cause a denial of service condition by sending a series of specific CIP-based commands to the controller.

CWE-400 May 06, 2017

CVE-2016-6877 5.3 MEDIUM EPSS 0.01

Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to trigger HTTP 302 redirections via vectors involving the HTTP Host header and a cached page. NOTE: the vendor reports "our internal analysis of this issue concluded that this was not a valid vulnerability" because an exploitation scenario would involve a man-in-the-middle attack against a TLS session

CWE-20 May 05, 2017

CVE-2017-8801 6.1 MEDIUM EPSS 0.00

Trend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG before CP 1352 has XSS via a crafted URI using a blocked website.

CWE-79 May 05, 2017

CVE-2016-8916 5.5 MEDIUM EPSS 0.00

IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.

CWE-200 May 05, 2017

CVE-2016-0255 6.1 MEDIUM EPSS 0.00

IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject malicious script into a Web page which would be executed in a victim's Web browser within the security context of the hosting Web site, once the page is viewed. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials. IBM X-Force ID: 110564.

CWE-79 May 05, 2017