Skip to content
OpenAdvisories

Archive

7 November 2017

Vulnerabilities first published on this day (UTC), newest first.

17 results · Clear filters · Feed

  • Critical 9.0

    An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure. A specially crafted packet …

  • Critical 9.8

    An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordina…

  • Critical 9.9

    An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0…

  • Critical 9.8
    CVE-2017-2894 EPSS 31%

    An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose …

  • Critical 9.0

    An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.…

  • Critical 9.6

    An exploitable vulnerability exists in the firmware update functionality of Circle with Disney. Specially crafted netwo…

  • Critical 9.0

    An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1. …

  • Critical 9.9

    An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1. Sp…

  • Critical 9.9

    An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with D…

  • Critical 9.8

    An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose …

  • Critical 9.9

    An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney. Specially crafted ne…

  • Critical 9.0

    An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. S…

  • Critical 9.9

    An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0…

  • Critical 9.6

    An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. S…

  • Critical 9.8

    An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.…

  • Critical 9.0

    An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.…

  • Critical 9.0

    An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. S…