Skip to content
OpenAdvisories

Archive

June 2017

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.8
    CVE-2017-6086 Public exploit

    ViMbAdmin CSRF Vulnerabilities

    Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request …

  • High 8.8
    CVE-2017-8464 Exploited Public exploit EPSS 90%

    Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 20…

    KEV Feb 10, 2022
  • High 8.8
    CVE-2017-9462 Public exploit EPSS 22%

    Mercurial has Incorrect Permission Assignment for Critical Resource

    In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.