Skip to content
OpenAdvisories

Archive

11 November 2016

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    In framework/modules/navigation/controllers/navigationController.php in Exponent CMS v2.4.0 or older, the parameter "ta…

  • Unscored —

    framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0patch1 does not properly restrict access …

  • Unscored —

    SQL Injection in framework/modules/search/controllers/searchController.php in Exponent CMS v2.4.0 allows remote attacke…

  • Unscored —

    SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read databas…

  • Unscored —

    framework/modules/addressbook/controllers/addressController.php in Exponent CMS v2.4.0 allows remote attackers to read …

  • Unscored —

    getUsersByJSON in framework/modules/users/controllers/usersController.php in Exponent CMS v2.4.0 allows remote attacker…

  • Unscored —

    Integer overflow in SystemUI in KK(4.4) and L(5.0/5.1) on Samsung Note devices allows attackers to cause a denial of se…

  • Unscored —

    Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git…

  • Unscored —

    A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0, with the rerank array parameter, can lead to site da…