Skip to content
OpenAdvisories

Archive

15 September 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2014-9463 Public exploit EPSS 16%

    functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code …

  • High 8.1
    CVE-2017-9805 Exploited Public exploit Scanner template EPSS 99%

    REST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering

    The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to Remote Code Execution when deserializing XML payloa…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2017-14489 Public exploit

    The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users t…