Skip to content
OpenAdvisories

Archive

15 October 2017

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Medium 5.5

    ccsv Double Free vulnerability

    The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact via a crafted file. NOTE: This has been disputed and it is argued that this is …

  • High 7.5
    CVE-2017-15363 Scanner template EPSS 15%

    Luracast Restler directory traversal vulnerability

    Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter.

  • Unscored —

    PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, rela…

  • Unscored —

    The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort…

  • Unscored —

    /bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own s…

  • Unscored —

    XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.