3 November 2017

33 results · Feed

• Unscored —
  CVE-2017-1000136

  Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable to old sess…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000137

  Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text b…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000151

  Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sens…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000155

  Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being …

  Nov 3, 2017
• Unscored —
  CVE-2017-1000153

  Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access contr…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000150

  Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on lo…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000145

  Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000149

  Mahara 1.10 before 1.10.9 and 15.04 before 15.04.6 and 15.10 before 15.10.2 are vulnerable to XSS due to window.opener …

  Nov 3, 2017
• Unscored —
  CVE-2017-1000157

  Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable …

  Nov 3, 2017
• Unscored —
  CVE-2017-1000133

  Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circum…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000131

  Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000148

  Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to PHP code execution as M…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000146

  Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to the arbitrary execution of Ja…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000152

  Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as anot…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000156

  Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000142

  Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users be…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000144

  Mahara 1.9 before 1.9.6 and 1.10 before 1.10.4 and 15.04 before 15.04.1 are vulnerable to a site admin or institution a…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000138

  Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when dragging/droppi…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000154

  Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication met…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000139

  Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-s…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000147

  Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request …

  Nov 3, 2017
• Unscored —
  CVE-2017-1000140

  Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a malici…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000143

  Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users re…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000171

  Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text.

  Nov 3, 2017
• Unscored —
  CVE-2017-1000132

  Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a malici…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000135

  Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable as logged-i…

  Nov 3, 2017
• Unscored —
  CVE-2017-1000134

  Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because gro…

  Nov 3, 2017
• Unscored —
  CVE-2017-14359

  MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS)

  A potential security vulnerability has been identified in HPE Performance Center versions 12.20. The vulnerability could be remotely exploited to allow cross-site scripting.

  Micro Focus HPE Performance Center
  Nov 3, 2017
• Unscored —
  CVE-2017-16522

  MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to ob…

  Nov 3, 2017
• Unscored —
  CVE-2017-16523

  MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1…

  Nov 3, 2017
• Unscored —
  CVE-2017-16513 Public exploit

  Ipswitch WS_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations fi…

  Nov 3, 2017
• Unscored —
  CVE-2017-16237 Public exploit

  In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary Write vulnerability b…

  Nov 3, 2017
• High 7.5
  CVE-2017-16516

  yajl-ruby gem Denial of Service vulnerability

  In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a SIGABRT in the yajl_string_decode function in yajl_encode.c. This results in the whole ruby process terminating and pote…

  r-cran-jsonlite yajl yajl ruby-yajl Debian Ubuntu RubyGems
  Nov 3, 2017