Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-03-24 CVE-2016-10268 Integer Underflow (Wrap or Wraparound) vulnerability in Libtiff 4.0.7
tools/tiffcp.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (integer underflow and heap-based buffer under-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 78490" and libtiff/tif_unix.c:115:23.
local
low complexity
libtiff CWE-191
7.8
2017-03-24 CVE-2016-10267 Divide By Zero vulnerability in Libtiff 4.0.7
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8.
local
low complexity
libtiff CWE-369
5.5
2017-03-24 CVE-2016-10266 Divide By Zero vulnerability in Libtiff 4.0.7
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22.
local
low complexity
libtiff CWE-369
5.5
2017-03-24 CVE-2017-7257 Cross-site Scripting vulnerability in Cmsmadesimple CMS Made Simple 2.1.6
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter.
network
low complexity
cmsmadesimple CWE-79
5.4
2017-03-24 CVE-2017-7256 Cross-site Scripting vulnerability in Cmsmadesimple CMS Made Simple 2.1.6
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter.
network
low complexity
cmsmadesimple CWE-79
5.4
2017-03-24 CVE-2017-7255 Cross-site Scripting vulnerability in Cmsmadesimple CMS Made Simple 2.1.6
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter.
network
low complexity
cmsmadesimple CWE-79
5.4
2017-03-24 CVE-2017-7243 NULL Pointer Dereference vulnerability in Eclipse Tinydtls 0.8.2
Eclipse tinydtls 0.8.2 for Eclipse IoT allows remote attackers to cause a denial of service (DTLS peer crash) by sending a "Change cipher spec" packet without pre-handshake.
network
low complexity
eclipse CWE-476
7.5
2017-03-24 CVE-2017-7240 Path Traversal vulnerability in Miele Professional Pst10 Webserver
An issue was discovered on Miele Professional PST10 devices.
network
low complexity
miele-professional CWE-22
7.5
2017-03-24 CVE-2017-5511 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact by leveraging an improper cast, which triggers a heap-based buffer overflow.
network
low complexity
imagemagick debian CWE-119
critical
9.8
2017-03-24 CVE-2017-5510 Out-of-bounds Write vulnerability in multiple products
coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted PSD file, which triggers an out-of-bounds write.
local
low complexity
imagemagick debian CWE-787
7.8