15 January 2017

10 results · Feed

• Unscored —
  CVE-2017-5480

  Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated …

  Jan 15, 2017
• Unscored —
  CVE-2017-5494

  Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote a…

  Jan 15, 2017
• Unscored —
  CVE-2017-2584

  arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5492

  Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5491

  wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofe…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5487 Public exploit EPSS 87%

  wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 befor…

  wordpress Debian
  Jan 15, 2017
• Unscored —
  CVE-2017-5493

  wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random n…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5490

  Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in …

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5488

  Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote …

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017
• Unscored —
  CVE-2017-5489

  Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authent…

  wordpress wordpress Debian Ubuntu
  Jan 15, 2017