Skip to content
OpenAdvisories

Archive

19 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /19 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2017-15645 Public exploit

    CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacke…

  • Unscored —
    CVE-2017-15646 Public exploit

    Webmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager' menu, there is a 'Dow…

  • Unscored —
    CVE-2017-15647 Public exploit Scanner template EPSS 27%

    On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a cr…

  • Unscored —
    CVE-2017-15644 Public exploit

    SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/…

  • Unscored —
    CVE-2017-15643 Public exploit

    An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. IK…

  • Unscored —
    CVE-2017-15649 Public exploit

    net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2015-6668 Public exploit

    The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the…

  • Unscored —
    CVE-2017-15639 Public exploit

    tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the…

  • High 7.5
    CVE-2017-10271 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Support…

    Oracle WebLogic Server
    KEV Feb 10, 2022
  • Unscored —
    CVE-2017-10309 Public exploit

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affect…

    Oracle Java
  • Unscored —
    CVE-2017-10355 Public exploit EPSS 16%

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Support…

    Oracle Java openjdk-8 openjdk-9 Ubuntu
  • Unscored —
    CVE-2017-10352 Public exploit

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). T…

    Oracle WebLogic Server
  • Unscored —
    CVE-2017-10033 Public exploit

    Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Suppor…

    Oracle WebCenter Sites
  • Unscored —
    CVE-2017-10366 Public exploit EPSS 43%

    Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Perfor…

    Oracle PeopleSoft Enterprise PT PeopleTools
  • Unscored —
    CVE-2017-12579 Public exploit

    An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and ea…