Skip to content
OpenAdvisories

Archive

21 April 2017

Vulnerabilities first published on this day (UTC), newest first.

47 results · Feed

  • Unscored —

    DMM Movie Player App for Android before 1.2.1, and DMM Movie Player App for iPhone/iPad before 2.1.3 does not verify SS…

  • Unscored —

    Heartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a reflected XSS in example…

  • Unscored —

    Opera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted HTML document, relate…

  • Unscored —

    WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context.

  • Unscored —

    OpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted object, followed by an…

  • Unscored —

    Palo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via crafted request parameters,…

  • Unscored —

    The Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which administrative authentication …