Skip to content
OpenAdvisories

Archive

23 October 2017

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2015-2878 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hija…

  • Unscored —
    CVE-2015-5533 Public exploit

    SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote…

  • Unscored —
    CVE-2011-4334 Public exploit

    edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated use…

  • Unscored —
    CVE-2011-4333 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2017-13772 Public exploit EPSS 51%

    Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated…

  • Unscored —
    CVE-2017-15808 Public exploit

    In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.

  • Unscored —
    CVE-2017-15580 Public exploit EPSS 16%

    osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. However, it does not properly …

  • Unscored —
    CVE-2017-15687 Public exploit

    DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.…

  • Unscored —
    CVE-2017-7089 Public exploit

    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befo…

  • Unscored —
    CVE-2017-7117 Public exploit EPSS 10%

    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befo…

  • Unscored —
    CVE-2017-7115 Public exploit

    An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. The issue inv…

  • Unscored —
    CVE-2017-7092 Public exploit

    An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud befo…

  • Medium 5.3
    CVE-2017-9947 Public exploit

    A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V…