Archive
26 May 2017
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —
A Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to execute una…
-
Unscored —
An improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to interac…
-
Unscored —
A password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an attacker to carry out in…
-
Unscored —
A weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows attacker to carry out in…
-
Unscored —
An open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute unauthorized code or …
-
Unscored —
A Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows attacker to execute unauthori…
-
Unscored —
An escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows attacker to gain root …
-
Unscored —
An Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4.0 through 5.4.2 allow…
-
Medium 6.8
Apache Knox allows impersonation of users
For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this …
-
Critical 9.8
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 all…
KEV Jun 8, 2022 -
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
High 7.8
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
KEV Mar 3, 2022 -
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Unscored —
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Serv…
-
Medium 4.3
Contao Core directory traversal vulnerability
Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end" users to view files outside their file mounts or the document root via unspecified vectors.
-
Unscored —
Yodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c.
-
Unscored —
Foreman since version 1.5 is vulnerable to an incorrect authorization check due to which users with user management per…
-
Unscored —
IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be …
-
Unscored —
IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could explo…
-
Unscored —
IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc…
-
Medium 6.5
An issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect, the program assigns p…