2017-05-04 - CVE Archive

CVE-2017-8768 May 04, 22:29 CRITICAL Act Now

Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Atlassian Sourcetree

NVD

CVSS 3.0

9.8

EPSS

8.0%

CVE-2017-8773 May 04, 04:59 CRITICAL Act Now

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out of Bounds Write on a Heap Buffer due to improper. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation RCE Buffer Overflow Memory Corruption Microsoft +4

NVD

CVSS 3.1

9.8

EPSS

2.4%

CVE-2017-8775 May 04, 04:59 CRITICAL Act Now

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Internet Security Total Security Antivirus Pro +1

NVD

CVSS 3.1

9.8

EPSS

0.5%

CVE-2017-8774 May 04, 04:59 CRITICAL Act Now

Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Memory Corruption while parsing a malformed Mach-O file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Internet Security Total Security Antivirus Pro +1

NVD

CVSS 3.1

9.8

EPSS

0.5%