Skip to content
OpenAdvisories

Archive

27 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /27 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

50 results · Feed

  • Unscored —
    CVE-2017-13676

    Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an app…

    Symantec Norton Remove & Reinstall
  • Medium 6.1
    CVE-2017-14762

    GeniXCMS Cross-site Scripting (XSS) via id parameter

    In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.

    genix/cms Packagist
  • Unscored —
    CVE-2017-14760

    SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugi…

  • Medium 6.1
    CVE-2017-14761

    GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter

    In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter.

    genix/cms Packagist
  • Unscored —
    CVE-2017-14766

    The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_s…

  • High 8.8
    CVE-2017-14764

    GeniXCMS arbitrary PHP code execution

    In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.

    genix/cms Packagist
  • Unscored —
    CVE-2017-14767

    The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-para…

    ffmpeg ffmpeg ffmpeg Debian Ubuntu Alpine
  • High 8.8
    CVE-2017-14763

    GeniXCMS arbitrary PHP code execution

    In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.

    genix/cms Packagist
  • Medium 6.1
    CVE-2017-14765

    GeniXCMS Cross-site Scripting (XSS) via the Menu ID field

    In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.

    genix/cms Packagist
  • Unscored —
    CVE-2017-14753

    Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authentica…