28 April 2017

76 results · Feed

• Unscored —
  CVE-2017-6250

  NVIDIA GeForce Experience contains a vulnerability in NVIDIA Web Helper.exe, where untrusted script execution may lead …

  NVIDIA GeForce Experience
  Apr 28, 2017
• Unscored —
  CVE-2016-8591

  log_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to exe…

  Apr 28, 2017
• Unscored —
  CVE-2016-8589

  log_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to…

  Apr 28, 2017
• Unscored —
  CVE-2016-8587

  dlp_policy_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated user…

  Apr 28, 2017
• Unscored —
  CVE-2016-8585

  admin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users t…

  Apr 28, 2017
• Unscored —
  CVE-2016-8592

  log_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users…

  Apr 28, 2017
• Unscored —
  CVE-2016-8584

  Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values, which allows remote atta…

  Apr 28, 2017
• Unscored —
  CVE-2016-8586

  detected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticat…

  Apr 28, 2017
• Unscored —
  CVE-2016-8593

  Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows…

  Apr 28, 2017
• Unscored —
  CVE-2016-8588

  The hotfix_upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated user…

  Apr 28, 2017
• Unscored —
  CVE-2016-8590

  log_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to…

  Apr 28, 2017
• Unscored —
  CVE-2017-1194

  IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow a…

  IBM IBM WebSphere Application Server
  Apr 28, 2017
• Unscored —
  CVE-2017-1141

  IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information …

  IBM IBM Insights Foundation for Energy
  Apr 28, 2017
• Unscored —
  CVE-2016-7843

  Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and Att…

  MaruUo Factory AttacheCase Lite AttacheCase for Java AttacheCase Pro
  Apr 28, 2017
• Unscored —
  CVE-2016-7815

  Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain acc…

  Cybozu Remote Service Manager
  Apr 28, 2017
• Unscored —
  CVE-2016-7839

  Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the…

  Olive Design Olive Blog
  Apr 28, 2017
• Unscored —
  CVE-2016-7840

  Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via t…

  Olive Design WEB SCHEDULE
  Apr 28, 2017
• Unscored —
  CVE-2016-7841

  Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via…

  Olive Design Olive Diary DX
  Apr 28, 2017
• Unscored —
  CVE-2016-7842

  Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to…

  HiBARA Software AttacheCase
  Apr 28, 2017
• Unscored —
  CVE-2017-2119

  Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via un…

  WBCE WBCE_CMS
  Apr 28, 2017
• Unscored —
  CVE-2017-2123

  Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject ar…

  SpiQe Software OneThird CMS
  Apr 28, 2017
• Unscored —
  CVE-2017-2120

  SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arb…

  WBCE WBCE_CMS
  Apr 28, 2017
• Unscored —
  CVE-2017-2105

  The TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the…

  PRESENTCAST TVer App for Android Android
  Apr 28, 2017
• Unscored —
  CVE-2017-2115

  Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp"…

  Cybozu Cybozu Office
  Apr 28, 2017
• Unscored —
  CVE-2017-2155

  Buffer overflow in Hoozin Viewer 2, 3, 4.1.5.15 and earlier, 5.1.2.13 and earlier, and 6.0.3.09 and earlier allows remo…

  ICON Hoozin Viewer
  Apr 28, 2017
• Unscored —
  CVE-2017-2111

  HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, T…

  I-O DATA DEVICE TS-WLCE TS-WPTCAM2 TS-WPTCAM
  Apr 28, 2017
• Unscored —
  CVE-2017-2117

  Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read…

  cubecart CubeCart
  Apr 28, 2017
• Unscored —
  CVE-2017-2101

  Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to bypass…

  INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application
  Apr 28, 2017
• Unscored —
  CVE-2017-2114

  Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject ar…

  Cybozu Cybozu Office
  Apr 28, 2017
• Unscored —
  CVE-2017-2109

  Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android …

  Cybozu Cybozu KUNAI for Android Android
  Apr 28, 2017
• Unscored —
  CVE-2017-2093

  Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors.

  Cybozu Cybozu Garoon
  Apr 28, 2017
• Unscored —
  CVE-2017-2141

  WN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute arbitrary OS commands via uns…

  I-O DATA DEVICE WN-G300R3
  Apr 28, 2017
• Unscored —
  CVE-2017-2102

  Cross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V…

  INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application
  Apr 28, 2017
• Unscored —
  CVE-2017-2154

  Untrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST Office 3 [Standard], J…

  Apr 28, 2017
• Unscored —
  CVE-2017-2156

  Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to …

  Vivaldi Technologies Vivaldi installer for Windows Windows
  Apr 28, 2017
• Unscored —
  CVE-2017-2118

  Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web scrip…

  WBCE WBCE_CMS
  Apr 28, 2017
• Unscored —
  CVE-2017-2147

  Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitr…

  WP Statistics WP Statistics
  Apr 28, 2017
• Unscored —
  CVE-2017-2137

  ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change conf…

  Apr 28, 2017
• Unscored —
  CVE-2017-2140

  Tablacus Explorer 17.3.30 and earlier allows arbitrary scripts to be executed in the context of the application due to …

  Gaku Tablacus Explorer
  Apr 28, 2017
• Unscored —
  CVE-2017-2094

  Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "Mu…

  Cybozu Cybozu Garoon
  Apr 28, 2017