Skip to content
OpenAdvisories

Archive

5 June 2017

Vulnerabilities first published on this day (UTC), newest first.

← May 2017 2017 / June /5 July 2017 →
  1. 113
  2. 234
  3. 39
  4. 43
  5. 529
  6. 649
  7. 759
  8. 868
  9. 968
  10. 10 
  11. 113
  12. 1227
  13. 13121
  14. 1437
  15. 15112
  16. 1674
  17. 172
  18. 182
  19. 1938
  20. 2031
  21. 2132
  22. 2219
  23. 2313
  24. 247
  25. 2510
  26. 2629
  27. 2753
  28. 2818
  29. 2938
  30. 3035
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Low 2.7
    CVE-2017-9441

    Multiple cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to i…

  • High 8.8
    CVE-2017-9443

    BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL injection attacks via a crafted tables obje…

  • Unscored —
    CVE-2017-9444

    BigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php script (modify user info…

  • Unscored —
    CVE-2017-9420

    Cross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress allows remote attacke…

  • Unscored —
    CVE-2017-9442

    BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary code by uploading a crafted package c…

  • Unscored —
    CVE-2017-9439

    In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-9440

    In ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c, which allows attackers …

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-9438

    libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption…

    yara yara Debian Ubuntu
  • Unscored —
    CVE-2017-1000368

    Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded newlines) in the get_pro…

    sudo sudo sudo Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-8438

    Elastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as functionality. This bu…

    Elastic X-Pack Security
  • Unscored —
    CVE-2017-8440

    Starting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover page that could allow …

    Elastic Kibana
  • Unscored —
    CVE-2017-8836 Public exploit

    CSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380hw6_580hw2…

  • Unscored —
    CVE-2017-8838 Public exploit

    XSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380…

  • Unscored —
    CVE-2017-8835 Public exploit EPSS 62%

    SQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_380h…

  • Unscored —
    CVE-2017-8837 Public exploit

    Cleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw…

  • Unscored —
    CVE-2017-8441

    Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to ind…

    Elastic X-Pack Security
  • Unscored —
    CVE-2017-8841 Public exploit

    Arbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b3…

  • Unscored —
    CVE-2017-8839 Public exploit

    XSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw-b305hw2_3…

  • Unscored —
    CVE-2017-8840 Public exploit

    Debug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before …

  • Unscored —
    CVE-2017-8439

    Kibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual Builder. This bug could…

    Elastic Kibana
  • Unscored —
    CVE-2017-9437

    Openbravo Business Suite 3.0 is affected by SQL injection. This vulnerability could allow remote authenticated attacker…

  • Critical 9.8
    CVE-2017-9435

    Dolibarr ERP and CRM SQLi

    Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2017-9434

    Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filt…

    libcrypto++ libcrypto++ Debian Ubuntu
  • Critical 9.8
    CVE-2017-9436

    TeamPass SQL injection in users.queries.php

    TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

    nilsteampassnet/teampass Packagist
  • Unscored —
    CVE-2017-9430 Public exploit EPSS 11%

    Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service (application crash) …

    dnstracer dnstracer Debian Ubuntu
  • Unscored —
    CVE-2017-9431

    Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iom…

    grpc Debian
  • Unscored —
    CVE-2017-9433

    Document Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap-based buffer overflow…

    libmwaw libmwaw Debian Ubuntu
  • Unscored —
    CVE-2017-9432

    Document Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by a stack-based buffer o…

    libstaroffice Debian
  • Unscored —
    CVE-2017-1000367 Public exploit

    Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded spaces) in the get_process…

    sudo sudo Debian Ubuntu