Skip to content
OpenAdvisories

Archive

2 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /2 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Critical 9.8
    CVE-2017-11767

    ChakraCore vulnerable to privilege escalation

    ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • Unscored —
    CVE-2017-11508

    SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an auth…

    Tenable SecurityCenter
  • Unscored —
    CVE-2017-3736 EPSS 10%

    There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before …

    OpenSSL Software Foundation OpenSSL openssl openssl Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2017-16510

    WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading …

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2017-12280

    A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functional…

  • Unscored —
    CVE-2017-12243 Public exploit EPSS 77%

    A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewa…

  • Unscored —
    CVE-2017-12278

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allo…

  • Unscored —
    CVE-2017-12279

    A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unau…

    iOS
  • Unscored —
    CVE-2017-12283

    A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points…

  • Unscored —
    CVE-2017-12281

    A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalo…

  • Unscored —
    CVE-2017-12273

    A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access…

  • Unscored —
    CVE-2017-12261

    A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could al…

  • Unscored —
    CVE-2017-12277

    A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGF…

  • Unscored —
    CVE-2017-12274

    A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, …

  • Unscored —
    CVE-2017-12294

    A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site sc…

  • Unscored —
    CVE-2017-12276

    A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning …

  • Unscored —
    CVE-2017-12262

    A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise …

  • Unscored —
    CVE-2017-12295

    A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data…

  • Unscored —
    CVE-2017-12275

    A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco W…

  • Unscored —
    CVE-2017-12282

    A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LA…

  • Unscored —
    CVE-2017-10825

    Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to ga…

    NIPPON TELEGRAPH AND TELEPHONE WEST Installer of Flets Easy Setup Tool
  • Unscored —
    CVE-2017-10870

    Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) a…

    Justsystem Rakuraku Hagaki Select for Ichitaro Rakuraku Hagaki
  • Unscored —
    CVE-2017-10873

    OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecifi…

    Open Source Solution Technology OpenAM openam Ubuntu