Skip to content
OpenAdvisories

Archive

9 February 2017

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-5941 Public exploit EPSS 61%

    Code Execution through IIFE in node-serialize

    An issue was discovered in the node-serialize package 0.0.4 for Node.js. Untrusted data passed into the unserialize() function can be exploited to achieve arbitrary code execution by passing a JavaScript Object with an Immediately Invoked Function Expression …

  • Unscored —
    CVE-2017-5180 Public exploit

    Firejail before 0.9.44.4 and 0.9.38.x LTS before 0.9.38.8 LTS does not consider the .Xauthority case during its attempt…

  • Unscored —
    CVE-2017-3813 Public exploit

    A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows …

  • Unscored —
    CVE-2017-3807 Public exploit EPSS 15%

    A vulnerability in Common Internet Filesystem (CIFS) code in the Clientless SSL VPN functionality of Cisco ASA Software…

  • Unscored —
    CVE-2015-6023 Public exploit EPSS 11%

    ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remo…

  • Unscored —
    CVE-2015-6024 Public exploit EPSS 26%

    ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remo…

  • Unscored —
    CVE-2016-9244 Public exploit EPSS 74%

    A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled ma…

  • Unscored —
    CVE-2016-10191 Public exploit

    Heap-based buffer overflow in libavformat/rtmppkt.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, an…

  • Unscored —
    CVE-2016-10190 Public exploit

    Heap-based buffer overflow in libavformat/http.c in FFmpeg before 2.8.10, 3.0.x before 3.0.5, 3.1.x before 3.1.6, and 3…