Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
3 results · Clear filters · Feed
-
Medium 4.3CVE-2015-8309 Public exploit
Cherry Music directory traversal vulnerability
Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."
-
Medium 5.3CVE-2017-6370 Public exploit
TYPO3 Information Disclosure Vulnerability
TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.
-
Medium 4.3
Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via…
KEV Mar 28, 2022