Archive
16 October 2017
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Unscored —
Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a cr…
-
Unscored —CVE-2017-15221 Public exploit
ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324.
-
Unscored —CVE-2017-15361 Public exploit
The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 000000000…
-
Unscored —
Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup fi…
-
Unscored —
Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update…
-
Medium 6.1CVE-2017-15374 Public exploit
Shopware XSS Vulnerability
Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to p…
-
Unscored —CVE-2017-15303 Public exploit
In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, becaus…