Skip to content
OpenAdvisories

Archive

27 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /27 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Unscored —
    CVE-2017-14845 Public exploit

    Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.

  • Unscored —
    CVE-2017-14846 Public exploit

    Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.

  • Unscored —
    CVE-2017-14842 Public exploit

    Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.

  • Unscored —
    CVE-2017-14840 Public exploit

    TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.

  • Unscored —
    CVE-2017-14847 Public exploit

    Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.

  • Unscored —
    CVE-2017-14839 Public exploit

    TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.

  • Unscored —
    CVE-2017-14844 Public exploit

    Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.

  • Unscored —
    CVE-2017-14838 Public exploit

    TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.

  • Unscored —
    CVE-2017-14841 Public exploit

    Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handl…

  • Unscored —
    CVE-2017-14843 Public exploit

    Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.

  • Unscored —
    CVE-2015-8249 Public exploit EPSS 74%

    The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and …

  • Unscored —
    CVE-2017-11120 Public exploit

    On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor rep…

  • Unscored —
    CVE-2015-1336 Public exploit

    The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access …

    man-db man-db Debian Ubuntu
  • Unscored —
    CVE-2015-3643 Public exploit

    usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ub…

    usb-creator Ubuntu