Skip to content
OpenAdvisories

Archive

7 September 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 5.4

    Centreon Cross-site Scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Centreon 2.6.1 (fixed in Centreon 18.10.0 and Centreon web 2.8.27).

  • Medium 6.1
    CVE-2017-12794 Scanner template EPSS 24%

    Django vulnerable to XSS on 500 pages

    In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn't affe…