Export limit exceeded: 16490 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 89783 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (89783 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2017-18659 | 1 Google | 1 Android | 2024-11-21 | 5.3 Medium |
| An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.x) software. Attackers can crash system processes via a broadcast to AdaptiveDisplayColorService. The Samsung ID is SVE-2017-8290 (July 2017). | ||||
| CVE-2017-18657 | 1 Google | 1 Android | 2024-11-21 | 5.3 Medium |
| An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is an arbitrary write in a trustlet. The Samsung ID is SVE-2017-8893 (August 2017). | ||||
| CVE-2017-18655 | 1 Google | 1 Android | 2024-11-21 | 9.8 Critical |
| An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. There is a stack-based buffer overflow with resultant memory corruption in a trustlet. The Samsung IDs are SVE-2017-8889, SVE-2017-8891, and SVE-2017-8892 (August 2017). | ||||
| CVE-2017-18652 | 1 Google | 1 Android | 2024-11-21 | 9.8 Critical |
| An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. SVoice allows arbitrary code execution by changing dynamic libraries. The Samsung ID is SVE-2017-9299 (September 2017). | ||||
| CVE-2017-18650 | 1 Google | 1 Android | 2024-11-21 | 7.5 High |
| An issue was discovered on Samsung mobile devices with N(7.x) software. There is a WifiStateMachine IllegalArgumentException and reboot if a malformed wpa_supplicant.conf is read. The Samsung ID is SVE-2017-9828 (October 2017). | ||||
| CVE-2017-18645 | 1 Google | 1 Android | 2024-11-21 | 9.8 Critical |
| An issue was discovered on Samsung mobile devices with M(6.x) and N(7.x) (Qualcomm chipsets) software. There is a panel_lpm sysfs stack-based buffer overflow. The Samsung ID is SVE-2017-9414 (December 2017). | ||||
| CVE-2017-18644 | 1 Google | 1 Android | 2024-11-21 | 9.8 Critical |
| An issue was discovered on Samsung mobile devices with L(5.1), M(6.x), and N(7.x) software. There is a muic_set_reg_sel heap-based buffer overflow during the reading of MUIC register values. The Samsung ID is SVE-2017-10011 (December 2017). | ||||
| CVE-2017-18640 | 5 Fedoraproject, Oracle, Quarkus and 2 more | 8 Fedora, Peoplesoft Enterprise Pt Peopletools, Quarkus and 5 more | 2024-11-21 | 7.5 High |
| The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564. | ||||
| CVE-2017-18639 | 1 Progress | 1 Sitefinity Cms | 2024-11-21 | 6.1 Medium |
| Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages Parameter : Image Title, /Content/links Parameter : Link Title, /Content/links Parameter : Link Title, or /Content/Videos/LibraryVideos/default-video-library Parameter : Video Title. | ||||
| CVE-2017-18635 | 4 Canonical, Debian, Novnc and 1 more | 5 Ubuntu Linux, Debian Linux, Novnc and 2 more | 2024-11-21 | 6.1 Medium |
| An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name. | ||||
| CVE-2017-18634 | 1 Tagdiv | 1 Newspaper | 2024-11-21 | 9.8 Critical |
| The newspaper theme before 6.7.2 for WordPress has script injection via td_ads[header] to admin-ajax.php. | ||||
| CVE-2017-18615 | 1 Wp-kama | 1 Kama Click Counter | 2024-11-21 | 6.1 Medium |
| The kama-clic-counter plugin before 3.5.0 for WordPress has XSS. | ||||
| CVE-2017-18613 | 1 Trust Form Project | 1 Trust Form | 2024-11-21 | 6.1 Medium |
| The trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter. | ||||
| CVE-2017-18612 | 1 Netattingo | 1 Wp-whois-domain | 2024-11-21 | 6.1 Medium |
| The wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter. | ||||
| CVE-2017-18611 | 1 Magicfields | 1 Magic Fields | 2024-11-21 | 6.1 Medium |
| The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter. | ||||
| CVE-2017-18610 | 1 Magicfields | 1 Magic Fields | 2024-11-21 | 6.1 Medium |
| The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter. | ||||
| CVE-2017-18609 | 1 Magicfields | 1 Magic Fields | 2024-11-21 | 6.1 Medium |
| The magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter. | ||||
| CVE-2017-18608 | 1 Spot | 1 Spot.im Comments | 2024-11-21 | 6.1 Medium |
| The spotim-comments plugin before 4.0.4 for WordPress has multiple XSS issues. | ||||
| CVE-2017-18606 | 1 Theme-fusion | 1 Avada | 2024-11-21 | 6.1 Medium |
| The avada theme before 5.1.5 for WordPress has stored XSS. | ||||
| CVE-2017-18605 | 1 Gravitatedesign | 1 Gravitate Qa Tracker | 2024-11-21 | 9.8 Critical |
| The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection. | ||||