Skip to content
OpenAdvisories

Archive

10 April 2017

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2017-7648 Public exploit

    Foscam networked devices use the same hardcoded SSL private key across different customers' installations, which allows…

  • Unscored —
    CVE-2017-7185 Public exploit EPSS 12%

    Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embe…

  • Unscored —
    CVE-2017-5607 Public exploit

    Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.…

  • Unscored —
    CVE-2017-6190 Public exploit EPSS 18%

    Directory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware before V1.05b09 allow…

  • Unscored —
    CVE-2015-8255 Public exploit

    AXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and admin/local_del.cgi.

  • Unscored —
    CVE-2015-8258 Public exploit

    AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via …