CVE-2017-3464
- EPSS 0.25%
- Veröffentlicht 24.04.2017 19:59:01
- Zuletzt bearbeitet 20.04.2025 01:37:25
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged ...
CVE-2017-3308
- EPSS 0.27%
- Veröffentlicht 24.04.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privileged ...
CVE-2017-3309
- EPSS 0.27%
- Veröffentlicht 24.04.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.54 and earlier, 5.6.35 and earlier and 5.7.17 and earlier. Easily "exploitable" vulnerability allows low privi...
CVE-2017-5645
- EPSS 94.01%
- Veröffentlicht 17.04.2017 21:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
CVE-2016-1908
- EPSS 2.54%
- Veröffentlicht 11.04.2017 18:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding...
CVE-2016-5011
- EPSS 0.2%
- Veröffentlicht 11.04.2017 15:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot reco...
CVE-2015-8896
- EPSS 0.23%
- Veröffentlicht 15.03.2017 19:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.
CVE-2017-6009
- EPSS 0.28%
- Veröffentlicht 16.02.2017 11:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "decode_ne_resource_id" function in the "restable.c" source file. This is happening because the "len" parameter for memcpy is not checked for size and thus becomes a ne...
CVE-2017-6010
- EPSS 0.35%
- Veröffentlicht 16.02.2017 11:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An issue was discovered in icoutils 0.31.1. A buffer overflow was observed in the "extract_icons" function in the "extract.c" source file. This issue can be triggered by processing a corrupted ico file and will result in an icotool crash.
CVE-2017-6011
- EPSS 0.35%
- Veröffentlicht 16.02.2017 11:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
An issue was discovered in icoutils 0.31.1. An out-of-bounds read leading to a buffer overflow was observed in the "simple_vec" function in the "extract.c" source file. This affects icotool.