Search vulnerabilities

Results 425,850

CVE-2017-12494

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12493

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12492

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12491

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12490

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12489

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12488

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12487

A Remote Code Execution vulnerability in HPE Intelligent Management Center (iMC) PLAT version PLAT 7.3 (E0504) was found. The problem was resolved in HPE Intelligent Management Center PLAT v7.3 (E0506) or any subsequent version.

CVSS 3.0 · 8.8 High EPSS 5.6% KEV · Not listed
Vendors
Hp
CVE-2017-12473

ccnl_ccntlv_bytes2pkt in CCN-lite allows context-dependent attackers to cause a denial of service (application crash) via vectors involving packets with "wrong L values."

CVSS 3.0 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2017-12472

ccnl-ext-mgmt.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging missing NULL pointer checks after ccnl_malloc.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2017-12471

The cnb_parse_lev function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging failure to check for out-of-bounds conditions, which triggers an invalid read in the hexdump function.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2017-12470

Integer overflow in the ndn_parse_sequence function in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the typ and vallen variables.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2017-12469

Buffer overflow in util/ccnl-common.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact by leveraging incorrect memory allocation.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2017-12468

Buffer overflow in ccn-lite-ccnb2xml.c in CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors involving the vallen and len variables.

CVSS 3.0 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Products
CVE-2017-12467

Memory leak in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) by leveraging failure to allocate memory for the comp or complen structure member.

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2017-12466

CCN-lite before 2.00 allows context-dependent attackers to have unspecified impact via vectors related to ssl_halen when running ccn-lite-sim, which trigger an out-of-bounds access.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2017-12465

Multiple integer overflows in CCN-lite before 2.00 allow context-dependent attackers to have unspecified impact via vectors involving the (1) vallen variable in the iottlv_parse_sequence function or (2) typ, vallen and i variables in the localrpc_parse function.

CVSS 3.0 · 9.8 Critical EPSS 1.8% KEV · Not listed
Vendors
Products
CVE-2017-12464

ccn-lite-valid.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via vectors involving the keyfile variable.

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2017-12463

Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CCN-lite before 2.00 allows context-dependent attackers to cause a denial of service (memory consumption) via vectors involving an envelope_s structure pointer when the packet format is unknown.

CVSS 3.0 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2017-12447

gdk-pixbuf: heap-based overflow caused by invalid palette size

GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOME Nautilus 3.14.3 on Ubuntu 16.04, allows attackers to cause a denial of service (stack corruption) or possibly have unspecified other impact via a crafted file folder.

CVSS 3.0 · 7.8 High EPSS 1.1% KEV · Not listed
Vendors