Skip to content
OpenAdvisories

Archive

22 September 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2017-14712 Public exploit

    In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.

  • Unscored —
    CVE-2017-14717 Public exploit

    In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.

  • Unscored —
    CVE-2017-14706 Public exploit EPSS 28%

    DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeO…