Skip to content
OpenAdvisories

Archive

19 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /19 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2015-4684 Public exploit

    Multiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allow (1) r…

  • Unscored —
    CVE-2015-4682 Public exploit

    Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to obtain the installatio…

  • Unscored —
    CVE-2015-4681 Public exploit

    Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have unspecified impact via vectors r…

  • Unscored —
    CVE-2015-4683 Public exploit

    Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potent…

  • Unscored —
    CVE-2015-4685 Public exploit

    Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the plcm account to gain …

  • Critical 9.8
    CVE-2014-8684 Public exploit EPSS 72%

    CodeIgniter and Kohana vulnerable to PHP Object Injection

    CodeIgniter before 3.0 and Kohana 3.2.3 and earlier and 3.3.x through 3.3.2 make it easier for remote attackers to spoof session cookies and consequently conduct PHP object injection attacks by leveraging use of standard string comparison operators to compare…

    codeigniter/framework kohana/core Packagist
  • Unscored —
    CVE-2014-8686 Public exploit EPSS 37%

    CodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR…

  • Unscored —
    CVE-2017-6315 Public exploit EPSS 17%

    Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.pl…

  • Unscored —
    CVE-2017-14311 Public exploit

    The Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain privileges via a crafted 0x9C40…

  • Unscored —
    CVE-2014-9619 Public exploit

    Unrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in Netsweeper before 3.1.10, 4.0…

  • Unscored —
    CVE-2014-9611 Public exploit EPSS 13%

    Netsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary accounts and policies via…

  • Unscored —
    CVE-2014-9618 Public exploit Scanner template EPSS 73%

    The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote at…

  • Unscored —
    CVE-2014-9610 Public exploit

    Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass authentication a…

  • Unscored —
    CVE-2017-14143 Public exploit EPSS 77%

    The getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to validate cookie signatures, w…

  • High 8.1
    CVE-2017-12615 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server

    When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could th…

    Apache Software Foundation Apache Tomcat org.apache.tomcat.embed:tomcat-embed-core Maven
    KEV Mar 25, 2022