Skip to content
OpenAdvisories

Archive

7 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /7 September 2017 →
  1. 129
  2. 268
  3. 313
  4. 438
  5. 523
  6. 610
  7. 7118
  8. 8316
  9. 984
  10. 1025
  11. 11100
  12. 12 
  13. 13 
  14. 1420
  15. 156
  16. 1620
  17. 1735
  18. 18176
  19. 195
  20. 205
  21. 2118
  22. 2226
  23. 2333
  24. 2436
  25. 2536
  26. 261
  27. 274
  28. 28104
  29. 2998
  30. 3051
  31. 3142
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Unscored —
    CVE-2015-7571 Public exploit

    Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadi…

  • Unscored —
    CVE-2015-7855 Public exploit EPSS 31%

    The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2015-7871 Public exploit EPSS 82%

    Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authe…

    ntp ntp Debian Ubuntu
  • Unscored —
    CVE-2016-7976 Public exploit EPSS 23%

    The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparam…

    ghostscript ghostscript Debian Ubuntu
  • Unscored —
    CVE-2016-3113 Public exploit

    Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.

  • High 7.5
    CVE-2017-12637 Exploited Public exploit EPSS 95%

    Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application S…

    KEV Mar 19, 2025
  • Unscored —
    CVE-2017-12653 Public exploit

    360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any d…

  • Unscored —
    CVE-2015-3839 Public exploit

    The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL poi…

  • Unscored —
    CVE-2014-9262 Public exploit

    The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.

  • Unscored —
    CVE-2014-9260 Public exploit EPSS 11%

    The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users…

    Web / CMS
  • Unscored —
    CVE-2017-12479 Public exploit EPSS 12%

    It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR en…

  • Unscored —
    CVE-2017-12477 Public exploit EPSS 68%

    It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xi…

  • Unscored —
    CVE-2017-12478 Public exploit EPSS 78%

    It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one o…