Archive

21 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /21 September 2017 →

All Critical High Medium Low Exploited only Public exploit

18 results · Feed

Unscored —

CVE-2017-8037

In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 …

Aug 21, 2017
Unscored —

CVE-2017-6329

Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of is…

Symantec VIP Access for Desktop

Aug 21, 2017
Unscored —

CVE-2017-7424

A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2…

Micro Focus Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Aug 21, 2017
Unscored —

CVE-2017-7421

Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Admi…

Micro Focus Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Aug 21, 2017
Unscored —

CVE-2017-7420

An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus En…

Micro Focus Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Aug 21, 2017
Unscored —

CVE-2017-7423

A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise …

Micro Focus Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Aug 21, 2017
Unscored —

CVE-2017-7422

Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Develo…

Micro Focus Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Aug 21, 2017
Unscored —

CVE-2017-5187

A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) …

Micro Focus Micro Focus Enterprise Developer, Micro Focus Enterprise Server

Aug 21, 2017
Unscored —

CVE-2017-12981

NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.

Aug 21, 2017
Unscored —

CVE-2017-12982

The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCo…

openjpeg2 openjpeg2 openjpeg Debian Ubuntu Alpine

Aug 21, 2017
Unscored —

CVE-2017-12979

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/…

dokuwiki dokuwiki Debian Ubuntu

Aug 21, 2017
Unscored —

CVE-2017-12980

DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php. An a…

dokuwiki dokuwiki Debian Ubuntu

Aug 21, 2017
Unscored —

CVE-2017-12983

Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers …

imagemagick imagemagick Debian Ubuntu

Aug 21, 2017
Unscored —

CVE-2017-12784

In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user…

Aug 21, 2017
Unscored —

CVE-2017-12984 Public exploit

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.

Aug 21, 2017
Unscored —

CVE-2017-12978

lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.

cacti Debian

Aug 21, 2017
Critical 9.8

CVE-2017-11366 Public exploit

Codiad Vulnerable to Shell Command Injection

components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

codiad/codiad Packagist

Aug 21, 2017
Unscored —

CVE-2017-12977

The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection …

Aug 21, 2017