Skip to content
OpenAdvisories

Archive

22 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /22 May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

6 results · Feed

  • Unscored —
    CVE-2017-8056 Public exploit

    WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC …

  • Unscored —
    CVE-2017-8055

    WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains …

  • Unscored —
    CVE-2017-8054

    The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause…

    libpodofo libpodofo podofo Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-8053

    PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfP…

    libpodofo libpodofo podofo Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-7991

    Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function…

  • Medium 6.1
    CVE-2017-8052

    Craft CMS XSS Vulnerability

    Craft CMS before 2.6.2974 allows XSS attacks.

    craftcms/cms Packagist