Skip to content
OpenAdvisories

Archive

31 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /31 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • Unscored —
    CVE-2017-15884 Public exploit

    In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently s…

  • Unscored —
    CVE-2017-15950 Public exploit

    Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary c…

  • Unscored —
    CVE-2017-15991 Public exploit

    Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_typ…

  • Unscored —
    CVE-2017-15985 Public exploit

    Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.

  • Unscored —
    CVE-2017-15983 Public exploit

    MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editin…

  • Unscored —
    CVE-2017-15992 Public exploit

    Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

  • Unscored —
    CVE-2017-15993 Public exploit

    Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.

  • Unscored —
    CVE-2017-15986 Public exploit

    CPA Lead Reward Script allows SQL Injection via the username parameter.

  • Unscored —
    CVE-2017-15990 Public exploit

    Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.

  • Unscored —
    CVE-2017-15977 Public exploit

    Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.

  • Unscored —
    CVE-2017-15989 Public exploit

    Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.

  • Unscored —
    CVE-2017-15984 Public exploit

    Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.

  • Unscored —
    CVE-2017-15978 Public exploit

    AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.

  • Unscored —
    CVE-2017-15979 Public exploit

    Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.

  • Unscored —
    CVE-2017-15987 Public exploit

    Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.

  • Unscored —
    CVE-2017-15980 Public exploit

    US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.

  • Unscored —
    CVE-2017-15982 Public exploit

    Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form edit…

  • Unscored —
    CVE-2017-15988 Public exploit

    Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-200…

  • Unscored —
    CVE-2017-15981 Public exploit

    Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for f…