Skip to content
OpenAdvisories

Archive

March 2017

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2015-8309 Public exploit

    Cherry Music directory traversal vulnerability

    Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."

  • Medium 5.3
    CVE-2017-6370 Public exploit

    TYPO3 Information Disclosure Vulnerability

    TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

  • Medium 4.3
    CVE-2017-0059 Exploited Public exploit EPSS 62%

    Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via…

    KEV Mar 28, 2022