Skip to content
OpenAdvisories

Archive

11 September 2017

Vulnerabilities first published on this day (UTC), newest first.

82 results · Feed

  • Unscored —

    Nagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration options in which this …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 allows remote attackers …

  • Unscored —

    Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allow remote attackers to enumerate user accounts via a …

  • Unscored —

    Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via…

  • Unscored —
    CVE-2015-8351 Public exploit EPSS 37%

    PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_inclu…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Role Scoper plugin before 1.3.67 for WordPress allows remote attackers …

  • Unscored —
    CVE-2015-8350 Scanner template

    Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remo…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows rem…

  • Unscored —
    CVE-2015-8349 Scanner template

    Cross-site scripting (XSS) vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary…

  • Unscored —

    Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL command…

  • Unscored —

    PHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller/report_logs.php in AlegroC…

  • Unscored —

    Open redirect vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers t…

  • Unscored —

    An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwr…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…

  • Unscored —

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to cause a denial of service or possibly have unspecified othe…