Archive
21 October 2017
Vulnerabilities first published on this day (UTC), newest first.
12 results · Feed
-
Unscored —
The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in …
-
Unscored —
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.ph…
-
Unscored —CVE-2017-15727 Public exploit
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
-
Unscored —CVE-2017-15734 Public exploit
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.
-
Unscored —
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.
-
Unscored —
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary.
-
Unscored —
Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web …
-
Unscored —
In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.
-
Unscored —CVE-2017-15735 Public exploit
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.
-
Unscored —
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.
-
Unscored —CVE-2017-15730 Public exploit
In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
-
High 8.8
Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an unt…
KEV Mar 3, 2022