Skip to content
OpenAdvisories

Archive

31 August 2017

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2015-5958 Public exploit EPSS 27%

    phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL.

  • Unscored —
    CVE-2014-8675 Public exploit EPSS 13%

    Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which al…

  • Unscored —
    CVE-2014-8677 Public exploit

    The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, an…

  • Unscored —
    CVE-2014-8676 Public exploit EPSS 40%

    Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attack…

  • High 7.5
    CVE-2017-0901 Public exploit EPSS 29%

    RubyGems may allow a maliciously crafted gem to overwrite files

    RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

  • Unscored —
    CVE-2017-13708 Public exploit EPSS 12%

    Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary …