Skip to content
OpenAdvisories

Archive

9 November 2017

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2017-16562 Public exploit EPSS 27%

    The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attacker…

  • Unscored —
    CVE-2017-16249 Public exploit EPSS 59%

    The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST req…

  • Unscored —
    CVE-2017-16567 Public exploit

    Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. …

  • Unscored —
    CVE-2017-16568 Public exploit

    Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality…

  • Unscored —
    CVE-2017-11309 Public exploit

    Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary c…

  • Unscored —
    CVE-2017-12969 Public exploit EPSS 10%

    Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows …

  • High 7.8
    CVE-2017-16651 Exploited Public exploit EPSS 46%

    Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary fil…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2015-7501 Exploited Public exploit Scanner template EPSS 86%

    Deserialization of Untrusted Data in Apache commons collections

    Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal …