Skip to content
OpenAdvisories

Archive

20 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /20 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2015-5177

    Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attacker…

    openslp-dfsg Ubuntu
  • Unscored —
    CVE-2015-5699

    The Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute …

  • Unscored —
    CVE-2011-1935

    pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate p…

    libpcap Debian
  • Unscored —
    CVE-2013-6049

    apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via un…

    apt-listbugs Debian
  • Medium 5.4
    CVE-2010-3659

    TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms

    Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x before 4.4.1 allow remote authenticated backend users to inject arbitrary web script or HTML via unspecified parameters to…

    typo3/cms-backend Packagist
  • Unscored —
    CVE-2017-13127

    The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the auth…

  • Unscored —
    CVE-2017-15670

    The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow…

    glibc eglibc glibc Debian Ubuntu
  • Unscored —
    CVE-2017-15291 Public exploit

    Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allow…

  • Unscored —
    CVE-2017-15671

    The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could …

    glibc eglibc Debian Ubuntu
  • High 7.8
    CVE-2017-12628

    Apache James Privilege Escalation

    The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be used to execute arbitrary commands. As James exposes JMX socket by default only on local-host, this vulnerability can on…

    Apache Software Foundation Apache James org.apache.james:james-project Maven
  • Unscored —
    CVE-2017-6141

    In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS …

    F5 F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, WebSafe Network devices
  • Unscored —
    CVE-2017-6145

    iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12…

    F5 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, WebSafe Network devices
  • Unscored —
    CVE-2017-6144

    In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the ser…

    F5 F5 BIG-IP PEM Network devices
  • Unscored —
    CVE-2017-6165

    In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 …

    F5 F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, WebSafe Network devices
  • Unscored —
    CVE-2017-14937

    The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to t…

  • Unscored —
    CVE-2017-2133

    SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows…

  • Unscored —
    CVE-2017-2132

    Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary…

  • Unscored —
    CVE-2017-2131

    Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access re…

  • Unscored —
    CVE-2017-15651

    PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .…