Archive
17 July 2017
Vulnerabilities first published on this day (UTC), newest first.
58 results · Feed
-
Unscored —
NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive passw…
-
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8CVE-2017-6744 Exploited
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
KEV Mar 3, 2022 -
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilit…
KEV Mar 3, 2022 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
KEV Mar 3, 2022 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
KEV Apr 19, 2023 -
High 8.8
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the af…
-
Unscored —
ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS …
-
Unscored —CVE-2017-9813 Public exploit
In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptN…
-
Unscored —CVE-2017-9810 Public exploit
There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Ma…
-
Unscored —
An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before…
-
Unscored —
The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus …
-
Unscored —
A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars. Thus gra…
-
Unscored —
The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Main…
-
Unscored —
Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.1…
-
Unscored —
Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents.
-
Unscored —
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achie…
-
Unscored —
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achie…
-
Unscored —CVE-2017-9609 Public exploit
Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web …
-
Unscored —CVE-2017-9934 Public exploit
Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability.
-
Medium 5.4
Bolt CMS Stored XSS
Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
-
Unscored —
Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote atta…
-
Medium 5.4
Bolt stored Cross-site Scripting (XSS)
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
-
Unscored —
In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection i…
-
Unscored —
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could ena…
-
Unscored —
An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has bee…
-
Medium 6.5
Moodle Improper Privilege Management
In Moodle 3.x, course creators are able to change system default settings for courses.
-
Medium 4.3
Moodle Information Disclosure
In Moodle 3.3, the course overview block reveals activities in hidden courses.
-
Unscored —
Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add r…
-
Medium 6.5
Moodle User fullname disclosure on user preferences page
Moodle 3.x has user fullname disclosure on the user preferences page.
-
Unscored —
An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of serv…
-
Unscored —
An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote atta…
-
Unscored —
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and …
-
Unscored —
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()…
-
Unscored —
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a d…
-
Unscored —
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding opt…
-
Unscored —
An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.