Archive
July 2017
Vulnerabilities first published in this month (UTC), newest first.
26 results · Clear filters · Feed
-
Medium 6.1
IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnera…
-
Medium 5.5
sosreport sensitive information disclosure via weak permissions of the generated archives
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
-
Medium 6.1
Yii Cross-site Scripting Framework vulnerability
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.
-
Medium 6.1CVE-2017-11503 Public exploit
Cross-site scripting in PHPMailer
PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.
-
Medium 6.1CVE-2016-5394 Public exploit
Cross site scripting in Apache Sling
In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the XSSAPI.encodeForJSString() method is not restrictive enough and for some input patterns allows script tags to pass through unencoded, leading to potential XSS vulnerabili…
-
Medium 5.4
Bolt CMS Stored XSS
Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
-
Medium 5.4
Bolt stored Cross-site Scripting (XSS)
Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
-
Medium 6.5
Moodle Improper Privilege Management
In Moodle 3.x, course creators are able to change system default settings for courses.
-
Medium 4.3
Moodle Information Disclosure
In Moodle 3.3, the course overview block reveals activities in hidden courses.
-
Medium 6.5
Moodle User fullname disclosure on user preferences page
Moodle 3.x has user fullname disclosure on the user preferences page.
-
Medium 6.1
Apache OpenMeetings Cross-site Scripting vulnerability
Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0.
-
Medium 5.3
Apache OpenMeetings responds to insecure HTTP methods
Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH.
-
Medium 6.5
Junos: Denial of Service vulnerability in rpd daemon
A denial of service vulnerability in rpd daemon of Juniper Networks Junos OS allows a malformed MPLS ping packet to crash the rpd daemon if MPLS OAM is configured. Repeated crashes of the rpd daemon can result in an extended denial of service condition for th…
-
Medium 5.9
MS-MPC or MS-MIC crash when passing large fragmented traffic through an ALG
An MS-MPC or MS-MIC Service PIC may crash when large fragmented packets are passed through an Application Layer Gateway (ALG). Repeated crashes of the Service PC can result in an extended denial of service condition. The issue can be seen only if NAT or state…
-
Medium 5.3
Junos OS: SRX Series: Cluster configuration sync failures occur if the root user account is locked out
When the device is configured to perform account lockout with a defined period of time, any unauthenticated user attempting to log in as root with an incorrect password can trigger a lockout of the root account. When an SRX Series device is in cluster mode, a…
-
Medium 6.1
Content Injection via TileJSON Name in mapbox.js
Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control
-
Medium 5.9
txAWS AWSServiceEndpoint defaults to not verifying server certificates
txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.
-
Medium 6.1
Cross Site Scripting (XSS) in plotly.js
Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.
-
Medium 6.1
phpMyAdmin CSS Injection Vulnerability
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters
-
Medium 6.1
phpMyAdmin Open Redirect
phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness
-
Medium 6.1
Open Redirect in oauth2_proxy
The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819
-
Medium 6.1
Content Injection via TileJSON attribute in mapbox.js
Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.
-
Medium 5.9
Apache Struts Improper Input Validation vulnerability
If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts versi…
-
Medium 6.1
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting a link that points to a shared Spark cluster and submits data including MHTML to the Spark master, or history server. Th…
-
Medium 6.6
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions prior to v3.9.15, 3.20.x versions prior to v3.20.0, and other versions prior to v4.4.0; and UAA bosh release (uaa-relea…
-
Medium 6.1
Subrion Cross-site scripting (XSS) vulnerability
Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.