Skip to content
OpenAdvisories

Archive

19 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /19 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

229 results · Feed

  • Unscored —
    CVE-2017-10337

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). Su…

    Oracle Hospitality Suite8
  • Unscored —
    CVE-2017-10383

    Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Interf…

    Oracle Hospitality Guest Access
  • Unscored —
    CVE-2017-10315

    Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions…

    Oracle Siebel UI Framework
  • Unscored —
    CVE-2017-10343

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Exp…

    Oracle Hospitality Simphony
  • Unscored —
    CVE-2017-10332

    Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration). S…

    Oracle Universal Work Queue
  • Unscored —
    CVE-2017-10330

    Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server). Supp…

    Oracle Common Applications
  • Unscored —
    CVE-2017-10402

    Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcompon…

    Oracle Hospitality Reporting and Analytics
  • Unscored —
    CVE-2017-10338

    Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: …

    Oracle PeopleSoft Enterprise PRTL Interaction Hub
  • Unscored —
    CVE-2017-12579 Public exploit

    An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and ea…

  • Unscored —
    CVE-2017-12296

    A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site …

  • Unscored —
    CVE-2017-12288

    A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenti…

  • Unscored —
    CVE-2017-12272

    A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to c…

    iOS
  • Unscored —
    CVE-2017-12289

    A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an aut…

    iOS
  • Unscored —
    CVE-2017-12298

    A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site s…

  • Unscored —
    CVE-2017-12293

    A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of ser…

  • Unscored —
    CVE-2017-12260

    A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x…

  • Unscored —
    CVE-2017-12251

    A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote…

  • Unscored —
    CVE-2017-12271

    A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute …

  • Unscored —
    CVE-2017-12259

    A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x…

  • Unscored —
    CVE-2017-12301

    A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker …

  • Unscored —
    CVE-2017-12287

    A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePr…

  • Unscored —
    CVE-2017-12284

    A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to…

    Windows
  • Unscored —
    CVE-2017-12286

    A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user prof…

  • Unscored —
    CVE-2017-12285 EPSS 37%

    A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote a…

  • Unscored —
    CVE-2017-3883

    A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible…

  • Unscored —
    CVE-2017-15611

    In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka User…

  • Medium 6.1
    CVE-2017-15612

    Cross-site Scripting in Mistune

    mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.

    mistune mistune mistune Debian Ubuntu PyPI
  • Unscored —
    CVE-2017-15609

    Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in cer…

  • Unscored —
    CVE-2017-15610

    An issue was discovered in Octopus before 3.17.7. When the special Guest user account is granted the CertificateExportP…