Skip to content
OpenAdvisories

Archive

23 January 2017

Vulnerabilities first published on this day (UTC), newest first.

97 results · Feed

  • Unscored —

    Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file, via …

  • Unscored —

    EMC Documentum WebTop Version 6.8, prior to P18 and Version 6.8.1, prior to P06; and EMC Documentum TaskSpace version 6…

  • Unscored —

    EMC Isilon OneFS 8.0.0.0, EMC Isilon OneFS 7.2.1.0 - 7.2.1.2, EMC Isilon OneFS 7.2.0.x, EMC Isilon OneFS 7.1.1.0 - 7.1.…

  • Unscored —
    CVE-2016-10156 Public exploit

    A flaw in systemd v228 in /src/basic/fs-util.c caused world writable suid files to be created when using the systemd ti…

  • Unscored —

    Akamai NetSession 1.9.3.1 is vulnerable to DLL Hijacking: it tries to load CSUNSAPI.dll without supplying the complete …

  • Unscored —

    Information Disclosure can occur in encryptionProfiles.jsd in Hitek Software's Automize because of the Read attribute b…

  • Unscored —

    Information Disclosure can occur in Hitek Software's Automize 10.x and 11.x passManager.jsd. Users have the Read attrib…

  • Unscored —

    Information Disclosure can occur in sshProfiles.jsd in Hitek Software's Automize because of the Read attribute being se…

  • Unscored —

    hitek.jar in Hitek Software's Automize uses weak encryption when encrypting SSH/SFTP and Encryption profile passwords. …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in plugins/markdown_plugin/_markdown.plugin.php in b2evolution before 6.8.5 al…

  • Unscored —

    An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's …

  • Unscored —

    SQL injection vulnerability in inc/lib/Options.class.php in GeniXCMS before 1.0.0 allows remote attackers to execute ar…

  • Unscored —

    The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows, when the gflags app is enabled…

  • Unscored —

    SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows unauthenticated users to execute arbitrary …

  • Unscored —

    An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the…

  • Unscored —

    LibTIFF version 4.0.7 is vulnerable to a heap-based buffer over-read in tif_lzw.c resulting in DoS or code execution vi…

  • Unscored —

    The patch for directory traversal (CVE-2017-5480) in b2evolution version 6.8.4-stable has a bypass vulnerability. An at…