Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2017-07-07 CVE-2017-11102 Improper Input Validation vulnerability in Graphicsmagick 1.3.26
The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during JNG reading via a zero-length color_image data structure.
network
low complexity
graphicsmagick CWE-20
7.5
2017-07-07 CVE-2017-11101 NULL Pointer Dereference vulnerability in Swftools 0.9.2
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_Relocate() function in lib/modules/swftools.c.
network
low complexity
swftools CWE-476
8.8
2017-07-07 CVE-2017-11100 NULL Pointer Dereference vulnerability in Swftools 0.9.2
When SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer Dereference in the swf_FoldSprite() function in lib/rxfswf.c.
network
low complexity
swftools CWE-476
8.8
2017-07-07 CVE-2017-11099 Improper Input Validation vulnerability in Swftools 0.9.2
When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c.
network
low complexity
swftools CWE-20
8.8
2017-07-07 CVE-2017-11098 Improper Input Validation vulnerability in Swftools 0.9.2
When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() function in lib/png.c.
network
low complexity
swftools CWE-20
8.8
2017-07-07 CVE-2017-11097 NULL Pointer Dereference vulnerability in Swftools 0.9.2
When SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference in the dict_lookup() function in lib/q.c.
network
low complexity
swftools CWE-476
8.8
2017-07-07 CVE-2017-11096 NULL Pointer Dereference vulnerability in Swftools 0.9.2
When SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer Dereference in the swf_DeleteFilter() function in lib/modules/swffilter.c.
network
low complexity
swftools CWE-476
8.8
2017-07-07 CVE-2017-9631 NULL Pointer Dereference vulnerability in Schneider-Electric Wonderware Archestra Logger 2017.426.2307.1
A Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior.
network
low complexity
schneider-electric CWE-476
7.5
2017-07-07 CVE-2017-9627 Resource Exhaustion vulnerability in Schneider-Electric Wonderware Archestra Logger 2017.426.2307.1
An Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware ArchestrA Logger, versions 2017.426.2307.1 and prior.
network
low complexity
schneider-electric CWE-400
8.6
2017-07-07 CVE-2017-6868 Improper Authentication vulnerability in Siemens Simatic CP 44X-1 Redundant Network Access Modules 1.4.0
An Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions prior to 1.4.1.
network
high complexity
siemens CWE-287
8.1