Skip to content
OpenAdvisories

Archive

4 July 2017

Vulnerabilities first published on this day (UTC), newest first.

30 results · Feed

  • Unscored —

    Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel thr…

  • Unscored —

    There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.

  • Unscored —
    CVE-2017-10803 Public exploit

    In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonym…

  • Unscored —

    In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on…

  • Unscored —

    In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass…

  • Unscored —

    JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymou…

  • Unscored —

    An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup …

  • Unscored —

    An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.

  • Unscored —

    An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use cr…

  • Unscored —

    Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary w…

  • Unscored —

    A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unau…

  • Unscored —

    A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database int…

  • Unscored —

    A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a …

  • Unscored —

    A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Netwo…

  • Unscored —

    A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Expres…

  • Unscored —

    A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker…

  • Unscored —

    A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) coul…

  • Unscored —

    A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticate…

  • Unscored —

    A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary c…

    iOS
  • Unscored —

    A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, loca…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Netwo…

  • Unscored —

    A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges …

    iOS
  • Unscored —

    A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker…

  • Unscored —

    A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthentica…

  • Unscored —

    A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authentica…

  • Unscored —

    A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated,…

  • Unscored —

    A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker…

  • Unscored —

    A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote att…

  • Unscored —

    A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated…