NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
85575 | CVE-2017-8421 | The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this. | 2 | 7.1 | High | 2017-05-27 | 2017-05-12 | View | |
85574 | CVE-2017-8419 | LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a denial of service (stack-based buffer overflow or heap-based buffer overflow) or possibly have unspecified other impact via a crafted file, as demonstrated by mishandling of num_channels. | 2 | 6.8 | Medium | 2017-05-27 | 2017-05-15 | View | |
85573 | CVE-2017-8418 | RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users. | 2 | 2.1 | Low | 2017-05-27 | 2017-05-12 | View | |
85572 | CVE-2017-8403 | 360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing procedure, which is available at any time and does not require a password. This affects firmware 2.1.4. Exploitation can use the 360fly Android or iOS application, or the BlueZ gatttool program. | 2 | 8.3 | High | 2017-05-27 | 2017-05-16 | View | |
85571 | CVE-2017-8401 | In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function png_load() in lib/png.c:724. This issue can be triggered by a malformed PNG file that is mishandled by png2swf. Attackers could exploit this issue for DoS. | 2 | 4.3 | Medium | 2017-05-27 | 2017-05-12 | View |
Page 558 of 17672, showing 5 records out of 88360 total, starting on record 2786, ending on 2790