Skip to content
OpenAdvisories

Archive

23 August 2017

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2017-9506 Public exploit EPSS 72%

    The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before…

  • Critical 9.8
    CVE-2017-11317 Exploited Public exploit EPSS 84%

    Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUploa…

    KEV Apr 11, 2022
  • Critical 9.8
    CVE-2017-11357 Exploited · Ransomware Public exploit EPSS 78%

    Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which …

    KEV Jan 26, 2023
  • Unscored —
    CVE-2017-12971 Public exploit

    Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2017-12970 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authenticat…

  • Unscored —
    CVE-2017-12965 Public exploit EPSS 16%

    Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID p…

  • High 8.8
    CVE-2017-11610 Public exploit EPSS 88%

    Incorrect Default Permissions in Supervisor

    The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated users to execute arbitrary commands via a crafted XML-RPC request, related to nested supervisord namespace lookups.