Archive

12 May 2017

Vulnerabilities first published on this day (UTC), newest first.

← April 2017 2017 / May /12 June 2017 →

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

Medium 6.1

CVE-2016-4855

ADOdb Cross-site scripting vulnerability in old test script

Cross-site scripting vulnerability in ADOdb versions prior to 5.20.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

ADOdb ADOdb libphp-adodb libphp-adodb Debian Ubuntu Packagist

May 12, 2017
Medium 5.4

CVE-2016-4880

baserCMS Cross-site Scripting vulnerability

Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

baserCMS Users Community baserCMS plugin Blog baserproject/basercms Packagist

May 12, 2017
Medium —

CVE-2017-0248 Public exploit

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc and Microsoft.AspNetCore.Mvc.Core

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to bypass Enhanced Security Usage taggings when they present a certificate that is invalid for a specific use, aka ".NET Security Feature Bypass Vulnerability."

Microsoft Microsoft .NET Framework Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet

May 12, 2017
Medium 5.3

CVE-2017-0256

Moderate severity vulnerability that affects Microsoft.AspNetCore.Mvc

A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

Microsoft ASP.NET Core Microsoft.AspNetCore.Mvc.Core System.Text.Encodings.Web NuGet

May 12, 2017