Skip to content
OpenAdvisories

Archive

6 November 2017

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2017-6331 Public exploit

    Prior to SEP 14 RU1 Symantec Endpoint Protection product can encounter an issue of Tamper-Protection Bypass, which is a…

  • Unscored —
    CVE-2017-14016 Public exploit EPSS 16%

    A Stack-based Buffer Overflow issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. The applicat…

  • Unscored —
    CVE-2017-16001 Public exploit

    In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently s…

  • Unscored —
    CVE-2017-16524 Public exploit EPSS 30%

    Web Viewer 1.0.0.193 on Samsung SRN-1670D devices suffers from an Unrestricted file upload vulnerability: 'network_ssl_…

  • High 8.8
    CVE-2017-16570 Public exploit

    Cross-Site Request Forgery (CSRF) in keystone

    KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to reject requests that lack an x-csrf-token header.