Skip to content
OpenAdvisories

Archive

17 May 2017

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —
    CVE-2017-8917 Public exploit Scanner template EPSS 100%

    SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspec…

  • Unscored —

    Banner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to obtain p…

  • Unscored —
    CVE-2017-4011 Scanner template

    Embedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x …

  • Unscored —

    Web Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers …

  • Unscored —

    User Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote attackers to view …

  • Unscored —

    Clickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote authenticate…

  • Unscored —

    Privilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote auth…

  • Unscored —

    Session Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote auth…

  • Unscored —

    perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current worki…

  • Unscored —

    The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which t…

  • Unscored —

    Quick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs) support, is vulnerable…

  • Unscored —

    Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for Wo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 …

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra Collaboration before 8.6.0 Pa…

  • Unscored —
    CVE-2017-8849 Public exploit

    smb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify arguments to the mount he…

  • Unscored —
    CVE-2017-8422 Public exploit

    KDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by spoofing a callerID and l…

  • Unscored —

    The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a directory traversal attack th…

  • Unscored —

    The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows prediction of a uniqid value ba…

  • Unscored —

    The Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename attack that bypasses a…

  • Unscored —

    Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote una…

  • Unscored —

    Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote un…