Skip to content
OpenAdvisories

Archive

28 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /28 September 2017 →
  1. 129
  2. 268
  3. 313
  4. 438
  5. 523
  6. 610
  7. 7118
  8. 8316
  9. 984
  10. 1025
  11. 11100
  12. 12 
  13. 13 
  14. 1420
  15. 156
  16. 1620
  17. 1735
  18. 18176
  19. 195
  20. 205
  21. 2118
  22. 2226
  23. 2333
  24. 2436
  25. 2536
  26. 261
  27. 274
  28. 28104
  29. 2998
  30. 3051
  31. 3142
All Critical High Medium Low Exploited only Public exploit

104 results · Feed

  • Medium 6.8
    CVE-2015-3976

    GE Multilink Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multilink ML800/1200/1600/2400 4.2.1 and earlier.

    GE ML810/3000/3100 series switch Multilink ML800/1200/1600/2400
  • Unscored —
    CVE-2015-2046

    Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20.

  • Unscored —
    CVE-2013-0870

    The 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.

  • Unscored —
    CVE-2012-2805

    Unspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.

    ffmpeg Debian
  • Unscored —
    CVE-2014-0141

    Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.

  • Unscored —
    CVE-2014-4925

    Cross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.

  • Unscored —
    CVE-2014-8871

    Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 a…

  • Unscored —
    CVE-2014-8753

    Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.

  • Unscored —
    CVE-2014-8900

    Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and …

  • Unscored —
    CVE-2014-8168

    Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.

  • Unscored —
    CVE-2014-8426

    Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.

  • Unscored —
    CVE-2014-8428

    Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.

  • Unscored —
    CVE-2014-9483

    Emacs 24.4 allows remote attackers to bypass security restrictions.

  • Unscored —
    CVE-2014-9514

    Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.

  • Unscored —
    CVE-2014-9557

    Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.

  • Unscored —
    CVE-2014-9558 Public exploit

    Multiple SQL injection vulnerabilities in SmartCMS v.2.

  • Unscored —
    CVE-2014-9513

    Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code.

    xbindkeys-config xbindkeys-config Debian Ubuntu
  • Unscored —
    CVE-2014-9312 Public exploit EPSS 45%

    Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.

  • Unscored —
    CVE-2014-9469

    Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.

  • Unscored —
    CVE-2014-5302 EPSS 11%

    Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; Sup…

  • Unscored —
    CVE-2014-5301 Public exploit EPSS 78%

    Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 …

  • Unscored —
    CVE-2016-0634

    The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via …

    bash bash bash Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7030

    FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows…

    freeipa freeipa Debian Ubuntu
  • Unscored —
    CVE-2017-8380

    Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact v…

    qemu qemu Debian Ubuntu