Skip to content
OpenAdvisories

Archive

23 June 2017

Vulnerabilities first published on this day (UTC), newest first.

13 results · Feed

  • Unscored —
    CVE-2017-9829 EPSS 69%

    '/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable, which allo…

  • Unscored —
    CVE-2017-9828 EPSS 82%

    '/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is vulnerable to shell comman…

  • Unscored —

    Insufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code to be executed with rai…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another use…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET req…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by u…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper ac…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users…

  • Unscored —

    Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0…

  • Unscored —

    Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Result…