Skip to content
OpenAdvisories

Archive

20 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /20 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Unscored —
    CVE-2017-14618 Public exploit

    Cross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows remote attackers to inject…

  • Unscored —
    CVE-2017-14619 Public exploit

    Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2015-7347 Public exploit

    Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.

  • Unscored —
    CVE-2015-2826 Public exploit EPSS 13%

    WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information.

  • Critical 9.8
    CVE-2017-12611 Public exploit Scanner template EPSS 87%

    Apache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal

    In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack.

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  • Unscored —
    CVE-2015-4075 Public exploit

    The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted…

  • Unscored —
    CVE-2015-4073 Public exploit

    Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to ex…

  • Unscored —
    CVE-2015-4074 Public exploit Scanner template EPSS 57%

    Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read a…

  • Unscored —
    CVE-2015-4072 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote at…

  • Unscored —
    CVE-2017-7924 Public exploit EPSS 22%

    An Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100 controllers 1763-L16BWA, 1763-…

  • Unscored —
    CVE-2017-8770 Public exploit EPSS 10%

    There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesy…