Archive
17 August 2017
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.
-
Unscored —
SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —
A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, re…
-
Unscored —
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attac…
-
Unscored —
A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to acce…
-
Unscored —
A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) cou…
-
Unscored —
A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could…
-
Unscored —
A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application …
-
Unscored —
The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could all…
-
Unscored —
A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could al…
-
Unscored —
A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating syst…
-
Unscored —
A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attack…
-
Unscored —
A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow…
-
Unscored —
A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content…
-
Unscored —
A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote…
-
Unscored —
A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote …
-
Unscored —
A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensit…
-
Unscored —
A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could all…
-
Unscored —
A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote …
-
Unscored —
A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating syst…
-
Unscored —
A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an …
-
High 8.8
Cross-Site Request Forgery in hawtio
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
-
Unscored —
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of esca…
-
Unscored —
Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
-
Unscored —CVE-2017-11662 Public exploit
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appl…
-
Unscored —CVE-2017-11664 Public exploit
The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —CVE-2017-11663 Public exploit
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —
The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid mem…
-
Unscored —
The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and …
-
Unscored —
The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and …
-
Unscored —
The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read…
-
Unscored —
The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (…