Skip to content
OpenAdvisories

Archive

13 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /13 April 2017 →
  1. 158
  2. 248
  3. 350
  4. 48
  5. 516
  6. 616
  7. 764
  8. 8109
  9. 928
  10. 1024
  11. 119
  12. 1212
  13. 1315
  14. 1464
  15. 1588
  16. 1620
  17. 17180
  18. 183
  19. 193
  20. 2063
  21. 2122
  22. 2229
  23. 23105
  24. 2447
  25. 251
  26. 269
  27. 2759
  28. 2839
  29. 2932
  30. 3045
  31. 3136
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Unscored —
    CVE-2014-3926

    Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2017-6807

    mod_auth_mellon before 0.13.1 is vulnerable to a Cross-Site Session Transfer attack, where a user with access to one we…

    libapache2-mod-auth-mellon libapache2-mod-auth-mellon Debian Ubuntu
  • Unscored —
    CVE-2015-6671

    Open edX edx-platform before 2015-08-25 requires use of the database for storage of SAML SSO secrets, which makes it ea…

  • Unscored —
    CVE-2015-4408

    Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated user…

  • Unscored —
    CVE-2015-4409

    Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated user…

  • Unscored —
    CVE-2015-4407

    Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated user…

  • Unscored —
    CVE-2017-6080

    An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1, caused by lack of a protect…

  • Unscored —
    CVE-2017-6081

    A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. To exploit the vulnerab…

  • Unscored —
    CVE-2017-6180

    Keekoon KK002 devices 1.8.12 HD have a Cross Site Request Forgery Vulnerability affecting goform/formChnUserPwd and gof…

  • Unscored —
    CVE-2017-5674 EPSS 22%

    A vulnerability in a custom-built GoAhead web server used on Foscam, Vstarcam, and multiple white-label IP camera model…

  • Unscored —
    CVE-2017-5619

    An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with th…

  • Unscored —
    CVE-2017-5621

    An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. XSS can be triggered via ma…

  • Unscored —
    CVE-2017-5675

    A command-injection vulnerability exists in a web application on a custom-built GoAhead web server used on Foscam, Vsta…

  • Critical 9.8
    CVE-2017-5929

    QOS.ch Logback vulnerable to Deserialization of Untrusted Data

    QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.

    logback logback ch.qos.logback:logback-core ch.qos.logback:logback-classic Debian Ubuntu Maven
  • Unscored —
    CVE-2017-5620

    An XSS issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attachments are opened …