Skip to content
OpenAdvisories

Archive

24 April 2017

Vulnerabilities first published on this day (UTC), newest first.

24 results · Clear filters · Feed

  • Unscored —
    CVE-2017-3563 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  • Unscored —
    CVE-2017-3587 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported v…

  • Unscored —
    CVE-2017-3622 Public exploit

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (…

  • Unscored —
    CVE-2017-3546 Public exploit

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChan…

  • Unscored —
    CVE-2017-3575 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  • Unscored —
    CVE-2017-3576 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  • Unscored —
    CVE-2017-3599 Public exploit EPSS 90%

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions …

  • Unscored —
    CVE-2017-3623 Public exploit EPSS 23%

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported v…

  • Unscored —
    CVE-2017-3548 Public exploit EPSS 52%

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integrati…

  • Unscored —
    CVE-2017-3528 Public exploit Scanner template EPSS 15%

    Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (l…

  • High 7.4
    CVE-2017-3506 Exploited Public exploit Scanner template EPSS 96%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…

    KEV Jun 3, 2024
  • Unscored —
    CVE-2017-3561 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  • Unscored —
    CVE-2017-3558 Public exploit

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions t…

  • Unscored —
    CVE-2017-3549 Public exploit EPSS 16%

    Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). Su…

  • Unscored —
    CVE-2015-7570 Public exploit

    Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbo…

  • Unscored —
    CVE-2015-7568 Public exploit

    SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the …

  • Unscored —
    CVE-2015-7245 Public exploit Scanner template EPSS 45%

    Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remo…

  • Unscored —
    CVE-2015-7569 Public exploit

    SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary …

  • Unscored —
    CVE-2015-7246 Public exploit EPSS 14%

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root acco…

  • Unscored —
    CVE-2015-7247 Public exploit EPSS 10%

    D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, an…

  • Unscored —
    CVE-2016-4313 Public exploit

    Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2017-7852 Public exploit

    D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to acces…

  • Unscored —
    CVE-2015-0104 Public exploit

    IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database…

  • Unscored —
    CVE-2015-0107 Public exploit

    IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database…