Skip to content
OpenAdvisories

Archive

8 March 2017

Vulnerabilities first published on this day (UTC), newest first.

109 results · Feed

  • Unscored —

    Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter).

  • Unscored —

    Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allo…

  • Unscored —

    IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

  • Unscored —

    IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. …

  • Unscored —

    IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache …

  • Unscored —

    IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclo…

  • Unscored —

    IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated att…

  • Unscored —

    Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…

  • Unscored —

    Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…

  • Unscored —

    Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…

  • Unscored —

    A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…

  • Unscored —

    Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…

  • Unscored —

    A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…

  • Unscored —

    Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…

  • Unscored —

    A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…

  • Unscored —

    A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…

  • Unscored —
    CVE-2017-5178 EPSS 14%

    An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence …

  • Unscored —

    An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acc…

  • Unscored —

    An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acc…

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to exe…

  • Unscored —

    An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to acce…

  • Unscored —

    An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to acce…

  • Unscored —

    An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to acce…

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execut…

  • Unscored —

    An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to …

  • Unscored —

    An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious applic…

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to…

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to exec…

  • Unscored —

    An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …

  • Unscored —

    An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to exec…

  • Unscored —

    An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execu…

  • Unscored —

    An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application …

  • Unscored —

    An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execut…

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execut…

  • Unscored —

    A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause m…

  • Unscored —

    An elevation of privilege vulnerability in MediaTek components, including the M4U driver, sound driver, touchscreen dri…

  • Unscored —

    An elevation of privilege vulnerability in the Qualcomm input hardware driver could enable a local malicious applicatio…

  • Unscored —

    An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the c…

  • Unscored —

    An information disclosure vulnerability in the Qualcomm bootloader could help to enable a local malicious application t…