Skip to content
OpenAdvisories

Archive

21 October 2017

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in …

  • Unscored —

    In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.ph…

  • Unscored —
    CVE-2017-15727 Public exploit

    In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.

  • Unscored —
    CVE-2017-15734 Public exploit

    In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.

  • Unscored —

    In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.

  • Unscored —

    In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary.

  • Unscored —

    Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web …

  • Unscored —

    In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.

  • Unscored —
    CVE-2017-15735 Public exploit

    In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.

  • Unscored —

    In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.

  • Unscored —
    CVE-2017-15730 Public exploit

    In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.

  • High 8.8
    CVE-2017-11292 Exploited EPSS 11%

    Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an unt…

    KEV Mar 3, 2022