Skip to content
OpenAdvisories

Archive

25 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /25 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.1
    CVE-2015-5169

    Cross-site Scripting in Apache Struts

    Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20.

    org.apache.struts:struts2-core Maven
  • Medium 6.1
    CVE-2017-14735 Public exploit

    OWASP AntiSamy Cross-site Scripting vulnerability

    OWASP AntiSamy before 1.5.7 allows XSS via HTML5 entities, as demonstrated by use of : to construct a javascript: URL.

    libowasp-antisamy-java org.owasp.antisamy:antisamy libowasp-antisamy-java Debian Ubuntu Maven
  • Medium 6.1
    CVE-2015-7316

    Plone Cross-site Scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1.

    plone PyPI
  • Medium 5.9
    CVE-2015-7315

    Plone unauthorized member addition vulnerability

    Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0rc1 allows remote attackers to add a new member to a Plone site with registration enabled, without acknowledgment of site administrator.

    plone products-cmfplone PyPI
  • Medium 6.1
    CVE-2015-6748 Public exploit

    Improper Neutralization of Input During Web Page Generation in Jsoup

    Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3.

    org.jsoup:jsoup jsoup Debian Maven
  • Medium 5.4
    CVE-2017-14506

    Gem in a Box vulnerable to Cross-site Scripting

    geminabox (aka Gem in a Box) before 0.13.6 has XSS, as demonstrated by uploading a gem file that has a crafted gem.homepage value in its .gemspec file.

    geminabox RubyGems