Archive
August 2017
Vulnerabilities first published in this month (UTC), newest first.
117 results · Clear filters · Feed
-
Unscored —CVE-2017-11154 Public exploit
Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-29…
-
Unscored —
Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 al…
-
Unscored —
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attacker…
-
Unscored —
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 all…
-
Unscored —
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remo…
-
Unscored —CVE-2017-10204 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported versio…
-
Unscored —CVE-2017-10046 Public exploit
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite …
-
Unscored —
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Supp…
-
Unscored —CVE-2017-10235 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported versio…
-
Unscored —CVE-2017-10129 Public exploit
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported versio…
-
Unscored —CVE-2015-7571 Public exploit
Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploadi…
-
Unscored —
The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause…
-
Unscored —
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authe…
-
Unscored —
The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparam…
-
Unscored —CVE-2016-3113 Public exploit
Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.
-
High 7.5
Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application S…
KEV Mar 19, 2025 -
Unscored —CVE-2017-12653 Public exploit
360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any d…
-
Unscored —CVE-2015-3839 Public exploit
The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL poi…
-
Unscored —CVE-2014-9262 Public exploit
The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files.
-
Unscored —
The basic_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users…
-
Unscored —
It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR en…
-
Unscored —
It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xi…
-
Unscored —
It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one o…
-
Unscored —CVE-2017-7533 Public exploit
Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges …
-
Unscored —CVE-2017-11657 Public exploit
Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\Dashlane dir…
-
Unscored —
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote at…
-
Unscored —
Proxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote attackers to execute arbit…
-
Unscored —
Proxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0 and 9.1 allows remote at…
-
Unscored —
Nitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL calls with directory tr…
-
Unscored —CVE-2017-11320 Public exploit
Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker…
-
Unscored —CVE-2015-7891 Public exploit
Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with …
-
Unscored —CVE-2017-7642 Public exploit
The sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before 4.0.21 allows local us…
-
Unscored —CVE-2017-11355 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow remote attackers to inje…
-
Unscored —CVE-2017-11356 Public exploit
The application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows remote authenticated user…
-
Unscored —
A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOp…
-
Unscored —CVE-2017-11494 Public exploit
SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2017-11552 Public exploit
mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers t…