Archive
16 October 2017
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to caus…
-
Unscored —
In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemServi…
-
Unscored —
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute …
-
Unscored —
An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access …
-
Unscored —
Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to ca…
-
Unscored —
Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or …
-
Unscored —
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell acces…
-
Unscored —
fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging us…
-
Unscored —
Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a cr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows rem…
-
Unscored —
Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service …
-
Unscored —CVE-2017-15221 Public exploit
ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324.
-
Unscored —
The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denia…
-
Unscored —
Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROG…
-
Unscored —
rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action.
-
Unscored —CVE-2017-15361 Public exploit
The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 000000000…
-
High 8.8
Apache Struts forced double OGNL evaluation
Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785.
-
Unscored —
The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.
-
Unscored —
The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.
-
Unscored —
Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2…
-
Unscored —
SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.
-
Unscored —
Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal …
-
Unscored —
Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote att…
-
Unscored —
oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote a…
-
Unscored —
Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files…
-
Unscored —
SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attacke…
-
Unscored —
Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup fi…
-
Unscored —
Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote …
-
Unscored —
Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable…
-
Unscored —
Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application…
-
Unscored —
There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. …
-
Medium 6.1CVE-2017-15374 Public exploit
Shopware XSS Vulnerability
Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to p…
-
Unscored —
The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute …
-
Unscored —
E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area).
-
Unscored —
There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 1…
-
Unscored —
There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted …
-
Unscored —
The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of servic…
-
Unscored —
osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/ticke…