Skip to content
OpenAdvisories

Archive

23 October 2017

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 8.1

    Potential Command Injection in codem-transcode

    The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitrary commands via a POST request to /probe.

  • High 7.5
    CVE-2014-3744 Scanner template EPSS 34%

    Directory Traversal in st

    Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.

  • High 7.5

    Improper Access Control in Apache Derby

    In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file.

  • High 7.5
    CVE-2017-9946 EPSS 25%

    A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V…