Archive

10 May 2017

Vulnerabilities first published on this day (UTC), newest first.

← April 2017 2017 / May /10 June 2017 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2017-7886

Dolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter

Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.

dolibarr dolibarr/dolibarr Ubuntu Packagist

May 10, 2017
Critical 9.8

CVE-2017-7888

Dolibarr ERP and CRM Insecure Encryption

Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.

dolibarr dolibarr/dolibarr Ubuntu Packagist

May 10, 2017
Critical 9.1

CVE-2017-8872

The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffe…

libxml2 libxml2 Debian Ubuntu

May 10, 2017