Archive
7 August 2017
Vulnerabilities first published on this day (UTC), newest first.
118 results · Feed
-
Unscored —CVE-2016-3113 Public exploit
Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.
-
Unscored —
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action.
-
High 7.5
Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application S…
KEV Mar 19, 2025 -
Unscored —CVE-2017-12653 Public exploit
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any d…
-
Unscored —
The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memor…
-
Unscored —
NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups.
-
Unscored —
ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "cont…
-
Low 3.1
Kubernetes in OpenShift3 Access Control Misconfiguration
Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.
-
Unscored —
cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking …
-
Unscored —
Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create …
-
Unscored —CVE-2015-3839 Public exploit
The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL poi…
-
Unscored —
t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t_coffee globally.
-
Unscored —
Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to poin…
-
Unscored —CVE-2014-9262 Public exploit
The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.
-
Unscored —
The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users…
-
Medium 6.1
Zope Cross-site scripting (XSS) vulnerability in ZMI pages
Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage_tabs_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10.5, 2.10.4, 2.10.2, 2.10.1, 2.12.
-
Unscored —
SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header.
-
Unscored —
Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin b…
-
Medium 6.1
Liferay Portal Vulnerable to XSS via a Crafted Redirect Field
XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp.
-
Medium 6.1
Liferay Portal XSS Vulnerability
XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.
-
Medium 6.1
Liferay Portal Vulnerable to XSS via an Invalid portletId
XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.
-
Medium 6.1
Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.
-
Unscored —
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.…
-
Medium 6.1
Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display
XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.
-
Medium 6.1
Liferay Portal XSS Vulnerability
XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address.
-
Unscored —
ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\png.c.
-
Unscored —
It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR en…
-
Unscored —
ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c.
-
Unscored —
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.
-
Unscored —
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xi…
-
Unscored —
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\dcm.c.
-
Unscored —
ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.
-
Unscored —
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one o…
-
High 7.5
Improper Input Validation in Apache Commons Email
When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.
-
Unscored —
A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and …
-
Unscored —
An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 Wi…
-
Unscored —
An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid V…
-
Unscored —
A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite,…
-
Unscored —
An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Secu…
-
Unscored —
A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW se…