Archive
August 2017
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
Red Hat Satellite 6 allows local users to access mongod and delete pulp_database.
-
Unscored —
Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.
-
Unscored —
Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.
-
Unscored —
Emacs 24.4 allows remote attackers to bypass security restrictions.
-
Unscored —
Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.
-
Unscored —CVE-2014-9558 Public exploit
Multiple SQL injection vulnerabilities in SmartCMS v.2.
-
Unscored —
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code.
-
Unscored —
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
-
Unscored —
Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.
-
Unscored —CVE-2014-5302 EPSS 11%
Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; Sup…
-
Unscored —
Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 …
-
Unscored —
The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via …
-
Unscored —
FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows…
-
Unscored —
Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact v…
-
Unscored —
The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
-
Unscored —
In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a…
-
Unscored —
Privilege escalation in Replibit Backup Manager earlier than version 2017.08.04 allows attackers to gain root privilege…
-
Unscored —
The tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows remote attackers to cause…
-
Unscored —
Directory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX) version 9.6.1 allows …
-
Unscored —
In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.
-
Unscored —
In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, …
-
Unscored —
A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerabili…
-
Unscored —
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Ne…
-
Unscored —
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Da…
-
Unscored —
A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be able to use a simple G…
-
Unscored —
Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.…
-
Unscored —
A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. O…
-
Unscored —CVE-2017-9650 Public exploit
An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTR…
-
Unscored —CVE-2017-9644 Public exploit
An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteSca…
-
Unscored —CVE-2017-9640 Public exploit
A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5…
-
Unscored —
Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, befor…
-
Unscored —CVE-2015-1395 EPSS 11%
Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote att…
-
Unscored —CVE-2015-1325 Public exploit
Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in U…
-
Unscored —
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arb…
-
Unscored —
Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arb…
-
High 7.5
Salt vulnerable to Improper Certificate Validation
Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules.
-
Medium 6.1
zend-diactoros Cross-site Scripting (XSS)
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.
-
Unscored —
php-fpm allows local users to write to or create arbitrary files via a symlink attack.
-
High 8.1
python-kerberos vulnerable to KDC spoofing attacks
The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle attack.