Skip to content
OpenAdvisories

Archive

1 February 2017

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2017-5630 Public exploit EPSS 13%

    PEAR core file overwrite vulnerability

    PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.

  • Unscored —
    CVE-2016-3053 Public exploit

    IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privil…

  • Unscored —
    CVE-2016-10079 Public exploit

    SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a lon…

  • Unscored —
    CVE-2017-3823 Public exploit EPSS 27%

    An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Cont…