Archive
September 2017
Vulnerabilities first published in this month (UTC), newest first.
1,228 results · Feed
-
Unscored —
Before version 4.8.2, WordPress allowed Cross-Site scripting in the plugin editor via a crafted plugin name.
-
Unscored —
Before version 4.8.2, WordPress was vulnerable to cross-site scripting in oEmbed discovery.
-
Unscored —CVE-2017-14725 Scanner template
Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/u…
-
Unscored —
Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchiv…
-
Unscored —
Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) a…
-
Unscored —
Before version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link modal via a javascript: or…
-
Unscored —
Before version 4.8.2, WordPress allowed a Cross-Site scripting attack in the template list view via a crafted template …
-
Unscored —
logger.c in the logger plugin in WeeChat before 1.9.1 allows a crash via strftime date/time specifiers, because a buffe…
-
Unscored —
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.
-
Unscored —
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.
-
Unscored —
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.
-
Unscored —CVE-2017-14712 Public exploit
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
-
Unscored —
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.
-
Unscored —
Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode…
-
Unscored —CVE-2017-14717 Public exploit
In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
-
Unscored —
DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeO…
-
Unscored —
DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters…
-
Unscored —
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation…
-
Unscored —
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiE…
-
Unscored —
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiE…
-
Unscored —
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization o…
-
Unscored —
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiE…
-
Unscored —
NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation…
-
Unscored —
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls coul…
-
Unscored —
NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to…
-
Unscored —CVE-2017-11395 EPSS 14%
Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration U…
-
Unscored —
Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance …
-
Unscored —
Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows atta…
-
Unscored —CVE-2017-14078 EPSS 50%
SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote atta…
-
Unscored —CVE-2017-14081 EPSS 17%
Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow r…
-
Unscored —CVE-2017-14079 EPSS 11%
Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attacker…
-
Unscored —
An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials o…
-
Unscored —
Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse…
-
Unscored —
CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of loc…
-
Unscored —
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…
-
Unscored —
IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a cr…
-
Unscored —
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…
-
Unscored —
STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…
-
Unscored —
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…
-
Unscored —
STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…