Archive
1 November 2017
Vulnerabilities first published on this day (UTC), newest first.
4 results · Clear filters · Feed
-
Unscored —CVE-2017-15918 Public exploit
Sera 1.2 stores the user's login password in plain text in their home directory. This makes privilege escalation trivia…
-
Unscored —
GraphicsMagick 1.3.26 is vulnerable to a memory information disclosure vulnerability found in the DescribeImage functio…
-
Unscored —
GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image di…
-
High 8.8CVE-2017-16244 Public exploit
October CMS CSRF
Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for postback handling, allowing an attacker to successfully take over the victim's account. The attack bypasses a protection mechanism involving …