Skip to content
OpenAdvisories

Archive

6 October 2017

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2015-2147 Public exploit

    Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arb…

  • Unscored —
    CVE-2015-2145 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers t…

  • Unscored —
    CVE-2015-2673 Public exploit EPSS 19%

    The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP Easy…

  • Unscored —
    CVE-2015-2142 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote auth…

  • Unscored —
    CVE-2015-2143 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote atta…

  • Unscored —
    CVE-2017-15084 Public exploit

    The web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.

  • Unscored —
    CVE-2017-13068 Public exploit

    QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection…