Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2017-03-26 CVE-2017-7266 Open Redirect vulnerability in Netflix Security Monkey
Netflix Security Monkey before 0.8.0 has an Open Redirect.
network
low complexity
netflix CWE-601
6.1
2017-03-26 CVE-2017-7264 Use After Free vulnerability in Artifex Mupdf 1.10A
Use-after-free vulnerability in the fz_subsample_pixmap function in fitz/pixmap.c in Artifex MuPDF 1.10a allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted document.
local
low complexity
artifex CWE-416
7.8
2017-03-26 CVE-2017-7263 Out-of-bounds Read vulnerability in Potrace Project Potrace 1.14
The bm_readbody_bmp function in bitmap_io.c in Potrace 1.14 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted BMP image.
local
low complexity
potrace-project CWE-125
7.8
2017-03-26 CVE-2016-10273 Out-of-bounds Write vulnerability in Jensenofscandinavia products
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev.
network
low complexity
jensenofscandinavia CWE-787
8.8
2017-03-25 CVE-2017-7262 Improper Input Validation vulnerability in AMD Ryzen 20170127
The AMD Ryzen processor with AGESA microcode through 2017-01-27 allows local users to cause a denial of service (system hang) via an application that makes a long series of FMA3 instructions, as demonstrated by the Flops test suite.
local
low complexity
amd CWE-20
5.5
2017-03-24 CVE-2017-7261 Improper Input Validation vulnerability in Linux Kernel
The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel through 4.10.5 does not check for a zero value of certain levels data, which allows local users to cause a denial of service (ZERO_SIZE_PTR dereference, and GPF and possibly panic) via a crafted ioctl call for a /dev/dri/renderD* device.
local
low complexity
linux CWE-20
5.5
2017-03-24 CVE-2016-10272 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libtiff 4.0.7
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "WRITE of size 2048" and libtiff/tif_next.c:64:9.
local
low complexity
libtiff CWE-119
7.8
2017-03-24 CVE-2016-10271 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Libtiff 4.0.7
tools/tiffcrop.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read and buffer overflow) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 1" and libtiff/tif_fax3.c:413:13.
local
low complexity
libtiff CWE-119
7.8
2017-03-24 CVE-2016-10270 Out-of-bounds Read vulnerability in Libtiff 4.0.7
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 8" and libtiff/tif_read.c:523:22.
local
low complexity
libtiff CWE-125
7.8
2017-03-24 CVE-2016-10269 Out-of-bounds Read vulnerability in Libtiff 4.0.7
LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta, 4.0.5, 4.0.6 and 4.0.7 allows remote attackers to cause a denial of service (heap-based buffer over-read) or possibly have unspecified other impact via a crafted TIFF image, related to "READ of size 512" and libtiff/tif_unix.c:340:2.
local
low complexity
libtiff CWE-125
7.8