Archive
March 2017
Vulnerabilities first published in this month (UTC), newest first.
1,302 results · Feed
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=object&action=[XSS] attack.
-
Unscored —CVE-2017-6547 Public exploit
Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-A…
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject a…
-
Unscored —
Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-A…
-
Unscored —
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=file&targetObjId=fileFolder-2&targetObjIdChild=[XSS] attack.
-
Unscored —
XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.
-
Unscored —
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vul…
-
Unscored —
A SQL injection issue is exploitable, with WordPress admin access, in the Mail Masta (aka mail-masta) plugin 1.0 for Wo…
-
Unscored —
Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter).
-
Unscored —
Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allo…
-
Unscored —
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. …
-
Unscored —
IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache …
-
Unscored —
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclo…
-
Unscored —
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated att…
-
Unscored —
Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…
-
Unscored —
Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…
-
Unscored —
Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…
-
Unscored —
A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…
-
Unscored —
Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…
-
Unscored —
A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…
-
Unscored —
Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insuffi…
-
Unscored —
A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…
-
Unscored —
A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filt…
-
Unscored —CVE-2017-5178 EPSS 14%
An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence …
-
Unscored —
An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acc…
-
Unscored —
An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to acc…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to exe…
-
Unscored —
An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to acce…
-
Unscored —
An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to acce…
-
Unscored —
An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to acce…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execut…
-
Unscored —
An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to …
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute …
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious applic…