Archive
9 November 2017
Vulnerabilities first published on this day (UTC), newest first.
8 results · Clear filters · Feed
-
Unscored —
The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attacker…
-
Unscored —
The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST req…
-
Unscored —CVE-2017-16567 Public exploit
Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature. …
-
Unscored —CVE-2017-16568 Public exploit
Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality…
-
Unscored —CVE-2017-11309 Public exploit
Buffer overflow in the SoftConsole client in Avaya IP Office before 10.1.1 allows remote servers to execute arbitrary c…
-
Unscored —
Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows …
-
High 7.8
Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary fil…
KEV Nov 3, 2021 -
Critical 9.8
Deserialization of Untrusted Data in Apache commons collections
Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal …