Archive
October 2017
Vulnerabilities first published in this month (UTC), newest first.
1,398 results · Feed
-
Critical 9.1
An IMAP FETCH response line indicates the size of the returned data, in number of bytes. When that response says the da…
-
Unscored —
GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file ("[ORIGINAL_FI…
-
Unscored —
VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data C…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Interne…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.…
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.1.…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.…
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…
-
Unscored —
This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reade…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.3.0.…
-
Unscored —CVE-2017-15884 Public exploit
In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently s…
-
Unscored —
Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a …
-
Unscored —
Mahara 15.04 before 15.04.15, 16.04 before 16.04.9, 16.10 before 16.10.6, and 17.04 before 17.04.4 are vulnerable to a …
-
Unscored —
An issue was discovered in Mahara before 15.04.14, 16.x before 16.04.8, 16.10.x before 16.10.5, and 17.x before 17.04.3…
-
Unscored —
libvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no" passed to QEMU by libv…
-
Unscored —
A URL redirection to untrusted site vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version pr…
-
Unscored —
A Reflected and Stored Cross-Site Scripting (XSS) vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any …
-
Unscored —
An SQL Injection vulnerability in HP ArcSight ESM and HP ArcSight ESM Express, in any 6.x version prior to 6.9.1c Patch…
-
Unscored —
Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Preven…
-
Unscored —
Network Data Loss Prevention is vulnerable to MIME type sniffing which allows older versions of Internet Explorer to pe…
-
Unscored —
Embedding Script (XSS) in HTTP Headers vulnerability in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote …
-
Unscored —CVE-2017-15950 Public exploit
Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary c…
-
Unscored —
Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to …
-
Unscored —
D-Link DSL-2740E 1.00_BG_20150720 devices are prone to persistent XSS attacks in the username and password fields: a re…
-
Unscored —CVE-2017-15991 Public exploit
Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_typ…
-
Unscored —CVE-2017-15985 Public exploit
Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.
-
Unscored —CVE-2017-15983 Public exploit
MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editin…
-
Unscored —CVE-2017-15992 Public exploit
Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.
-
Unscored —CVE-2017-15993 Public exploit
Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.
-
Unscored —CVE-2017-15986 Public exploit
CPA Lead Reward Script allows SQL Injection via the username parameter.
-
Unscored —CVE-2017-15990 Public exploit
Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.
-
Unscored —CVE-2017-15977 Public exploit
Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.
-
Unscored —CVE-2017-15989 Public exploit
Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.
-
Unscored —CVE-2017-15984 Public exploit
Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.
-
Unscored —CVE-2017-15978 Public exploit
AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.
-
Unscored —CVE-2017-15979 Public exploit
Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.