Skip to content
OpenAdvisories

Archive

April 2017

Vulnerabilities first published in this month (UTC), newest first.

← March 2017 2017 / April May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.6
    CVE-2017-7938 Public exploit

    Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to ca…

    dmitry dmitry Debian Ubuntu
  • Medium 6.1
    CVE-2017-7725 Public exploit

    Concrete CMS vulnerable to cross-site scripting (XSS)

    concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain na…

    concrete5/concrete5 Packagist
  • Medium 6.1
    CVE-2015-7562 Public exploit

    TeamPass vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

    nilsteampassnet/teampass Packagist