Skip to content
OpenAdvisories

Archive

2 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /2 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2017-14495 Public exploit EPSS 85%

    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote…

    dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-14492 Public exploit EPSS 94%

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…

    dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-14494 Public exploit EPSS 70%

    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vec…

    dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-14493 Public exploit EPSS 85%

    Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or exec…

    dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-14848 Public exploit

    WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.

  • Unscored —
    CVE-2017-14491 Public exploit EPSS 86%

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execu…

    dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-14496 Public exploit EPSS 68%

    Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-s…

    dnsmasq dnsmasq dnsmasq Debian Ubuntu Alpine
  • Unscored —
    CVE-2015-7358 Public exploit

    The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when ru…

  • Unscored —
    CVE-2015-6576 Public exploit

    Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execu…

  • Unscored —
    CVE-2017-11321 Public exploit

    The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'adm…

  • Unscored —
    CVE-2017-11322 Public exploit

    The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privile…

  • Unscored —
    CVE-2017-6089 Public exploit

    SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2017-6090 Public exploit Scanner template EPSS 96%

    Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authentic…

  • Unscored —
    CVE-2017-14757 Public exploit

    OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might …

  • Unscored —
    CVE-2017-14758 Public exploit

    OpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 (older versions might …

  • Unscored —
    CVE-2017-12792 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers to hijack the authent…

  • Medium 5.3
    CVE-2014-0043 Public exploit

    Apache Wicket allows attackers to check for third-party libraries

    In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a third party library with a known security vulnerability is in u…

    Apache Software Foundation Apache Wicket org.apache.wicket:wicket-core Maven