Skip to content
OpenAdvisories

Archive

13 July 2017

Vulnerabilities first published on this day (UTC), newest first.

← June 2017 2017 / July /13 August 2017 →
  1. 12
  2. 212
  3. 315
  4. 430
  5. 5180
  6. 669
  7. 774
  8. 88
  9. 93
  10. 1033
  11. 1163
  12. 1239
  13. 1392
  14. 1472
  15. 15 
  16. 1613
  17. 1758
  18. 1828
  19. 1930
  20. 2087
  21. 2135
  22. 2213
  23. 2335
  24. 2437
  25. 2554
  26. 2636
  27. 2729
  28. 2830
  29. 2912
  30. 3014
  31. 3166
All Critical High Medium Low Exploited only Public exploit

92 results · Feed

  • Unscored —
    CVE-2016-8952

    IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site scripting. This…

    IBM Emptoris Strategic Supply Management
  • Unscored —
    CVE-2016-8964

    IBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote attacker to brute forc…

    IBM BigFix Inventory
  • Medium 5.9
    CVE-2017-7672

    Apache Struts Improper Input Validation vulnerability

    If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts versi…

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2017-1308

    IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download fi…

    IBM Daeja ViewONE
  • High 7.5
    CVE-2017-9787 EPSS 11%

    Spring AOP functionality (Struts) vulnerable to DoS attack

    When using a Spring AOP functionality to secure Struts actions it is possible to perform a DoS attack. Solution is to upgrade to Apache Struts version 2.5.12 or 2.3.33.

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2017-7529 Public exploit EPSS 63%

    Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range f…

    nginx nginx nginx nginx Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-11103

    Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks because it obtains servic…

    samba samba samba heimdal Debian Ubuntu Alpine
  • High 8.8
    CVE-2017-11173

    Missing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request

    Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then…

    rack-cors ruby-rack-cors ruby-rack-cors Debian Ubuntu RubyGems
  • Unscored —
    CVE-2017-11198

    Cross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS through 2017-07-12 allows re…

  • Unscored —
    CVE-2017-11202

    FineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not restricted either durin…

  • Unscored —
    CVE-2017-11201

    application/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated admins to conduct XSS …

  • Unscored —
    CVE-2017-11200

    SQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes.php visitor_ip paramete…