Archive

13 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /13 May 2017 →

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

Medium 6.1

CVE-2017-7725 Public exploit

Concrete CMS vulnerable to cross-site scripting (XSS)

concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain na…

concrete5/concrete5 Packagist

Apr 13, 2017
Unscored —

CVE-2014-7920 Public exploit

mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulner…

Apr 13, 2017
Unscored —

CVE-2015-8284 Public exploit

SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.

Apr 13, 2017
Unscored —

CVE-2015-8283 Public exploit

Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.

Apr 13, 2017
Unscored —

CVE-2015-8282 Public exploit

SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.

Apr 13, 2017
Unscored —

CVE-2016-1915 Public exploit

Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4…

Apr 13, 2017
Unscored —

CVE-2016-1914 Public exploit

Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Serve…

Apr 13, 2017
Unscored —

CVE-2016-2555 Public exploit EPSS 80%

SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arb…

Apr 13, 2017