Skip to content
OpenAdvisories

Archive

18 October 2017

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2015-7714 Public exploit

    Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote ad…

  • Unscored —
    CVE-2015-7715 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allows…

  • Unscored —
    CVE-2017-15359 Public exploit

    In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory …

  • Unscored —
    CVE-2017-14322 Public exploit EPSS 37%

    The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior…

  • Unscored —
    CVE-2017-14956 Public exploit

    AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "…

  • Unscored —
    CVE-2017-15595 Public exploit

    An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded rec…

  • Unscored —
    CVE-2017-15578 Public exploit

    In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php.

  • Unscored —
    CVE-2017-15579 Public exploit

    In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch…