Skip to content
OpenAdvisories

Archive

16 October 2017

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2015-2780 Public exploit EPSS 15%

    Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a cr…

  • Unscored —
    CVE-2017-15221 Public exploit

    ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324.

  • Unscored —
    CVE-2017-15361 Public exploit

    The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 000000000…

  • Unscored —
    CVE-2014-9147 Public exploit EPSS 11%

    Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup fi…

  • Unscored —
    CVE-2014-9148 Public exploit EPSS 11%

    Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update…

  • Medium 6.1
    CVE-2017-15374 Public exploit

    Shopware XSS Vulnerability

    Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to p…

  • Unscored —
    CVE-2017-15303 Public exploit

    In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, becaus…