Skip to content
OpenAdvisories

Archive

14 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /14 May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2016-0727 Public exploit

    The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3u…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2016-1713 Public exploit EPSS 17%

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtige…

  • Unscored —
    CVE-2016-5312 Public exploit EPSS 54%

    Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote a…

  • Unscored —
    CVE-2016-5310 Public exploit

    The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);…

  • Unscored —
    CVE-2016-5309 Public exploit

    The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP);…

  • Unscored —
    CVE-2017-7690 Public exploit

    Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary …

  • Unscored —
    CVE-2017-7188 Public exploit

    Zurmo 3.1.1 Stable allows a Cross-Site Scripting (XSS) attack with a base64-encoded SCRIPT element within a data: URL i…

  • Unscored —
    CVE-2017-6554 Public exploit EPSS 16%

    pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to w…

  • Unscored —
    CVE-2015-6568 Public exploit EPSS 11%

    Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse…

  • Unscored —
    CVE-2015-6567 Public exploit EPSS 11%

    Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse…

  • Unscored —
    CVE-2015-8356 Public exploit

    Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated …

  • Unscored —
    CVE-2017-7455 Public exploit EPSS 16%

    Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

  • Unscored —
    CVE-2017-7457 Public exploit

    XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.

  • Unscored —
    CVE-2017-7456 Public exploit EPSS 29%

    Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView…

  • Unscored —
    CVE-2017-7643 Public exploit

    Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid progr…