Archive

7 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /7 September 2017 →

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

Medium 6.1

CVE-2009-5145

Zope Cross-site scripting (XSS) vulnerability in ZMI pages

Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12.

zope2 PyPI

Aug 7, 2017
Medium 6.1

CVE-2016-10404

Liferay Portal Vulnerable to XSS via a Crafted Redirect Field

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp.

com.liferay.portal:release.portal.bom Maven

Aug 7, 2017
Medium 6.1

CVE-2017-12648

Liferay Portal XSS Vulnerability

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.

com.liferay.portal:release.portal.bom com.liferay:com.liferay.frontend.taglib Maven

Aug 7, 2017
Medium 6.1

CVE-2017-12645

Liferay Portal Vulnerable to XSS via an Invalid portletId

XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.

com.liferay.portal:release.portal.bom Maven

Aug 7, 2017
Medium 6.1

CVE-2017-12647

Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title

XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.

com.liferay.portal:release.portal.bom Maven

Aug 7, 2017
Medium 6.1

CVE-2017-12649

Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.

com.liferay.portal:release.portal.bom Maven

Aug 7, 2017
Medium 6.1

CVE-2017-12646

Liferay Portal XSS Vulnerability

XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.

com.liferay.portal:release.portal.bom com.liferay:com.liferay.login.web com.liferay:com.liferay.login.authentication.openid.connect.web Maven

Aug 7, 2017
Medium 6.5

CVE-2017-6663 Exploited

A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unau…

iOS

Aug 7, 2017
KEV Mar 3, 2022