Archive
16 November 2017
Vulnerabilities first published on this day (UTC), newest first.
124 results · Feed
-
Unscored —CVE-2017-16851 EPSS 17%
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter.
-
Unscored —
shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider befor…
-
Unscored —CVE-2017-16848 EPSS 15%
Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter.
-
Unscored —CVE-2017-16849 EPSS 17%
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoa…
-
Unscored —CVE-2017-16846 EPSS 17%
Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method…
-
Unscored —
The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML bef…
-
Unscored —CVE-2017-16777 Public exploit
If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a lo…
-
Unscored —CVE-2017-16844 EPSS 12%
Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to …
-
Unscored —
SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indef…
-
Unscored —
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to g…
-
Unscored —
Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 a…
-
Unscored —
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could al…
-
Unscored —
An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an a…
-
Unscored —
A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a…
-
Unscored —
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could al…
-
Unscored —
A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to ex…
-
Unscored —
A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web…
-
Unscored —
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could al…
-
Unscored —
A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote…
-
Unscored —
A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote…
-
Unscored —
A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, …
-
Unscored —
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could al…
-
Unscored —
A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct …
-
Unscored —
A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker t…
-
Unscored —
A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Gen…
-
Unscored —
An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allo…
-
Unscored —
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could al…
-
Unscored —
A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local attacker to install an …
-
Unscored —
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could al…
-
Unscored —
A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local att…
-
Unscored —
A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an…
-
Unscored —
Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could al…
-
Unscored —
A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an a…
-
Unscored —
A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker …
-
Unscored —
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System soft…
-
Unscored —
The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL …
-
Unscored —
A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::ini…
-
Unscored —
The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculat…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/google_search_console/class-gsc-table.php in the Yoast SEO plugin bef…
-
Unscored —CVE-2017-16841 Public exploit
LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx.