Skip to content
OpenAdvisories

Archive

12 September 2017

Vulnerabilities first published on this day (UTC), newest first.

10 results · Clear filters · Feed

  • Unscored —
    CVE-2017-14396 Public exploit

    In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of …

  • Unscored —
    CVE-2017-8918 Public exploit

    XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely…

  • Unscored —
    CVE-2017-14344 Public exploit

    This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker mus…

  • Unscored —
    CVE-2017-1000250 Public exploit

    All versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information disclosure vulnerability whic…

  • Unscored —
    CVE-2017-1000251 Public exploit EPSS 16%

    The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and inclu…

  • Unscored —
    CVE-2017-14335 Public exploit EPSS 28%

    On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT req…

  • Unscored —
    CVE-2017-14266 Public exploit

    tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a relate…

  • Unscored —
    CVE-2017-3133 Public exploit Scanner template EPSS 11%

    A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unautho…

  • Unscored —
    CVE-2017-3131 Public exploit Scanner template

    A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to exe…

  • Unscored —
    CVE-2017-3132 Public exploit Scanner template

    A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unautho…