Skip to content
OpenAdvisories

Archive

January 2017

Vulnerabilities first published in this month (UTC), newest first.

← December 2016 2017 / January February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2017-5594 Public exploit

    Pagekit Weak Password Recovery Mechanism for Forgotten Password

    An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID …

    pagekit/pagekit Packagist
  • High 7.5
    CVE-2016-4793 Public exploit

    CakePHP allows remote attackers to spoof their IP

    The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.

    cakephp/cakephp cakephp cakephp Debian Ubuntu Packagist
  • High 8.1
    CVE-2017-5521 Exploited Public exploit EPSS 89%

    An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, …

    KEV Sep 8, 2022
  • High 7.3
    CVE-2016-10009 Public exploit EPSS 37%

    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execut…

    openssh openssh openssh Debian Ubuntu Alpine
  • High 7.0
    CVE-2016-10010 Public exploit

    sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which…

    openssh openssh openssh Debian Ubuntu Alpine