Skip to content
OpenAdvisories

Archive

September 2017

Vulnerabilities first published in this month (UTC), newest first.

← August 2017 2017 / September October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

1,228 results · Feed

  • Unscored —
    CVE-2017-11161

    Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers …

    Synology Synology Photo Station
  • Unscored —
    CVE-2017-12071

    Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3…

    Synology Synology Photo Station
  • Unscored —
    CVE-2017-11611 Public exploit

    Wolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to insufficient sanitization o…

  • Unscored —
    CVE-2017-9095 Public exploit

    XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled …

  • Unscored —
    CVE-2017-14219 Public exploit

    XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless cr…

  • Unscored —
    CVE-2017-12216

    A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to…

  • Unscored —
    CVE-2017-12225

    A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remot…

  • Unscored —
    CVE-2017-12221

    A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker…

  • Unscored —
    CVE-2017-12217

    A vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet handler of Cisco ASR 5500 …

  • Unscored —
    CVE-2017-12227

    A vulnerability in the SQL database interface for Cisco Emergency Responder could allow an authenticated, remote attack…

  • Unscored —
    CVE-2017-12211

    A vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco IOS XE Software could…

    iOS
  • Unscored —
    CVE-2017-12218

    A vulnerability in the malware detection functionality within Advanced Malware Protection (AMP) of Cisco AsyncOS Softwa…

  • Unscored —
    CVE-2017-12212

    A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to condu…

  • Unscored —
    CVE-2017-12213

    A vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running on Cisco Catalyst 400…

  • Unscored —
    CVE-2017-12223

    A vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router Software could allow an unau…

  • Unscored —
    CVE-2017-12224

    A vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco Meeting Server could allow a…

  • Unscored —
    CVE-2017-12220

    A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticat…

  • Unscored —
    CVE-2017-6795

    A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Rou…

    iOS
  • Unscored —
    CVE-2017-6796

    A vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series Aggregation Services Rou…

    iOS
  • Unscored —
    CVE-2017-6792

    A vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool could allow an authent…

  • Unscored —
    CVE-2017-6789

    A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker …

  • Unscored —
    CVE-2017-6780

    A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthentic…

  • Unscored —
    CVE-2017-6631

    A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco fo…

  • Unscored —
    CVE-2017-6793

    A vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning Tool could allow an authe…

  • High 7.5
    CVE-2017-6627 Exploited

    A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow a…

    iOS
    KEV Mar 3, 2022
  • Unscored —
    CVE-2017-6794

    A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to…

  • Unscored —
    CVE-2017-6791

    A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthen…

  • Medium 5.4
    CVE-2015-7672

    Centreon Cross-site Scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Centreon 2.6.1 (fixed in Centreon 18.10.0 and Centreon web 2.8.27).

    centreon/centreon Packagist
  • High 8.8
    CVE-2015-4619

    Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability

    Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.

    spina RubyGems
  • Unscored —
    CVE-2015-4697

    Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.

    Web / CMS
  • Unscored —
    CVE-2015-4629

    Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PI…

  • Unscored —
    CVE-2015-4085

    Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1.

  • Unscored —
    CVE-2015-4724

    SQL injection vulnerability in Concrete5 5.7.3.1.

  • Unscored —
    CVE-2015-4627

    SQL injection vulnerability in Pragyan CMS 3.0.

  • Unscored —
    CVE-2015-4721

    Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.

  • Unscored —
    CVE-2015-3169

    Cross-site scripting (XSS) vulnerability in askbot 0.7.51-4.el6.noarch.

  • Unscored —
    CVE-2015-3314 Public exploit

    SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.

  • Unscored —
    CVE-2015-3991

    strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary cod…

    strongswan Debian
  • Unscored —
    CVE-2015-3222 Public exploit

    syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.

  • Unscored —
    CVE-2015-3313 Public exploit

    SQL injection vulnerability in WordPress Community Events plugin before 1.4.