CVE-2017-8109
The salt-ssh minion code in SaltStack Salt before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on configured minions (clients).
Read MoreAuthor: Cyberthreat Blog
CVE-2017-8110
www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php.
Read MoreVU#219739: Portrait Displays SDK applications are vulnerable to arbitrary code execution and privilege escalation
Vulnerability Note VU#219739 <h2>Portrait Displays SDK applications are vulnerable to arbitrary code execution and privilege escalation</h2> <p class=”meta-text”>Original Release date: 25 Apr 2017 |...
Read MoreCVE-2017-7221
OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the...
Read MoreCVE-2017-7477
Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a denial of service or possibly have unspecified other impact by leveraging the use of a...
Read More