Skip to content
OpenAdvisories

Archive

17 March 2017

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2017-6370 Public exploit

    TYPO3 Information Disclosure Vulnerability

    TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

  • Medium 4.3

    BuddyPress Docs plugin Improper Privilege Management

    An issue was discovered in includes/component.php in the BuddyPress Docs plugin before 1.9.3 for WordPress. It is possible for authenticated users to edit documents of other users without proper permissions.

  • Medium 4.3
    CVE-2017-0059 Exploited Public exploit EPSS 62%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via…

    KEV Mar 28, 2022
  • Medium 6.5
    CVE-2017-0022 Exploited EPSS 18%

    Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Win…

    KEV May 24, 2022