Archive
14 September 2017
Vulnerabilities first published on this day (UTC), newest first.
130 results · Feed
-
Unscored —
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.…
-
Unscored —
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1…
-
Unscored —
A remote code execution vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.…
-
Unscored —
A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1…
-
High 7.5
Code injection in ansible
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An attacker can insert python into the vault to trigger this v…
-
Medium 6.5
Fastly Magento2 sensitive information disclosure
The Fastly CDN module before 1.2.26 for Magento2, when used with a third-party authentication plugin, might allow remote authenticated users to obtain sensitive information from authenticated sessions via vectors involving caching of redirect responses.
-
Unscored —
Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_…
-
Unscored —
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection attacks via the url param…
-
Unscored —
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enri…
-
Unscored —
QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2…
-
Unscored —
An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose h…
-
Unscored —
Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't sanitized via the id …
-
Unscored —
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $val…
-
Unscored —
Pagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization
-
Unscored —
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do not sanitize input, this…
-
Unscored —
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slides…
-
Unscored —
Vulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before making it part of an S…
-
Unscored —
Vulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin includes unlicensed vulne…
-
Unscored —
Vulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file download code located memb…
-
Unscored —
Vulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize the action variable be…
-
Unscored —
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image…
-
Unscored —
Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being pas…
-
Unscored —
Vulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't sanitized via the conta…
-
Unscored —
Vulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable CMS software from http…
-
Unscored —
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/u…
-
Unscored —
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/u…
-
Unscored —
Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app…
-
Unscored —
Vulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not check authentication befo…
-
Unscored —
Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize u…
-
Unscored —
Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS s…
-
Unscored —
Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.…
-
Unscored —
Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function edit_event_category does not sanitize …
-
Unscored —
Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to …
-
Unscored —
Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this …
-
Unscored —
Vulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not sanitize the survey_id…
-
Unscored —
Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_contact.php doesn't check that the user is auth…
-
Medium 6.1
python-fedora vulnerable to an open redirect resulting in loss of CSRF protection
python-fedora 0.8.0 and lower is vulnerable to an open redirect resulting in loss of CSRF protection
-
Unscored —
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.ph…
-
Unscored —
Vulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check that the user is authori…
-
Unscored —
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slides…