Skip to content
OpenAdvisories

Archive

12 October 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2017-15287 Public exploit Scanner template

    There is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as demonstrated by the "Name des Bou…

  • Medium 5.4
    CVE-2017-15284 Public exploit

    OctoberCMS Cross-Site Scripting

    Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context …

  • Unscored —
    CVE-2017-15277 Public exploit EPSS 19%

    ReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette uninitialized when pro…