Archive
14 July 2017
Vulnerabilities first published on this day (UTC), newest first.
72 results · Feed
-
Unscored —
The weblog page template in Apache Roller 5.1 through 5.1.1 allows remote authenticated users with admin privileges for…
-
Unscored —
Foreman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the require_ssl setting is set to …
-
Unscored —
Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise L…
-
Unscored —
discovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes displays the root passw…
-
Unscored —
authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by leveraging a race conditi…
-
Unscored —
/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the TLS certificate, which …
-
Unscored —
The mod_dontdothat component of the mod_dav_svn Apache module in Subversion as packaged in Red Hat Enterprise Linux 5.1…
-
Unscored —
The DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote attackers to cause a de…
-
Unscored —CVE-2017-0152 EPSS 11%
A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling object…
-
Unscored —CVE-2017-0028 EPSS 19%
A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The…
-
Unscored —CVE-2017-0196 EPSS 18%
An information disclosure vulnerability in Microsoft scripting engine allows remote attackers to obtain sensitive infor…
-
Unscored —
Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication toke…
-
Unscored —
GLPI before 9.1.5 allows SQL injection via an ajax/getDropdownValue.php request with an entity_restrict parameter that …
-
Unscored —
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier a…
-
Unscored —
Untrusted search path vulnerability in self-extracting archive files created by File Compact Ver.5 version 5.10 and ear…
-
Unscored —
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable…
-
Unscored —
SQL injection vulnerability in the AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to execut…
-
Unscored —
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable…
-
Unscored —
Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier a…
-
Unscored —
Directory traversal vulnerability in AssetView for MacOS Ver.9.2.0 and earlier versions allows remote attackers to read…
-
Unscored —
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.4.1 and earlier allows an attacker to gain p…
-
Unscored —
Untrusted search path vulnerability in Encrypted files in self-decryption format created by FileCapsule Deluxe Portable…
-
Unscored —
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz+ version 3.4.0 and earlier allows …
-
Unscored —
Untrusted search path vulnerability in Installer of Lhaz version 2.4.0 and earlier allows an attacker to gain privilege…
-
Unscored —
Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with i…
-
Unscored —
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.1.0.5.1 and earlier allows an attacker to gain p…
-
Unscored —
Untrusted search path vulnerability in FileCapsule Deluxe Portable Ver.2.0.9 and earlier allows an attacker to gain pri…
-
Unscored —
Untrusted search path vulnerability in Installer of Lhaz+ version 3.4.0 and earlier allows an attacker to gain privileg…
-
Unscored —
Untrusted search path vulnerability in Self-extracting archive files created by Lhaz version 2.4.0 and earlier allows a…
-
High 7.5
Apache OpenMeetings displays Tomcat version and detailed error stack trace
Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure.
-
Medium 6.1
Apache OpenMeetings Cross-site Scripting vulnerability
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0.
-
High 8.8
Apache OpenMeetings vulnerable to SQL injection
Apache OpenMeetings 1.0.0 is vulnerable to SQL injection. This allows authenticated users to modify the structure of the existing query and leak the structure of other queries being made by the application in the back-end.
-
High 8.8
Apache OpenMeetings vulnerable to Cross-Site Request Forgery
Apache OpenMeetings 1.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks, XSS attacks, click-jacking, and MIME based attacks.
-
Critical 9.8
Apache OpenMeetings has Inadequate Encryption Strength
Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.
-
High 8.2
Apache OpenMeetings vulnerable to parameter manipulation attacks
Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted areas.
-
Medium 5.3
Apache OpenMeetings responds to insecure HTTP methods
Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH.
-
High 7.5
Apache OpenMeetings updates user password in insecure manner
Apache OpenMeetings 1.0.0 updates user password in insecure manner.
-
High 7.5
Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption
Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.
-
High 7.5
Apache OpenMeetings allows flash content to be loaded from untrusted domains
Apache OpenMeetings 1.0.0 has an overly permissive crossdomain.xml file. This allows for flash content to be loaded from untrusted domains.
-
Critical 10.0
Apache OpenMeetings does not correctly validate uploaded XML documents
Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.