Archive
23 October 2017
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Medium 6.1
Pallets Werkzeug cross-site scripting vulnerability
Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote attackers to inject arbitrary web script or HTML via a fiel…
-
Medium 5.3CVE-2017-9947 Public exploit
A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions <V…