Skip to content
OpenAdvisories

Archive

1 November 2017

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2017-15918 Public exploit

    Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivia…

  • Unscored —
    CVE-2017-16353 Public exploit EPSS 14%

    GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage functio…

  • Unscored —
    CVE-2017-16352 Public exploit EPSS 15%

    GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image di…

  • High 8.8
    CVE-2017-16244 Public exploit

    October CMS CSRF

    Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for postback handling, allowing an attacker to successfully take over the victim's account. The attack bypasses a protection mechanism involving …