Archive
17 November 2017
Vulnerabilities first published on this day (UTC), newest first.
100 results · Feed
-
Unscored —
Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privile…
-
Unscored —
TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vecto…
-
Unscored —
BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access lo…
-
Unscored —
Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17…
-
Unscored —
The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugi…
-
Unscored —
The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action funct…
-
Unscored —
In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a mall…
-
Unscored —
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fie…
-
Unscored —
p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application cras…
-
Unscored —
A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earli…
-
Unscored —
Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation
-
Unscored —
EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection
-
Unscored —CVE-2017-1000226 Scanner template
Stop User Enumeration 1.3.8 allows user enumeration via the REST API
-
Unscored —
Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure
-
Unscored —
Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.
-
Unscored —
Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or c…
-
Unscored —
Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attac…
-
Unscored —
I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attack…
-
Unscored —
I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in th…
-
Unscored —
I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker…
-
Medium 5.3
Pysaml2 improperly initializes encryption vector
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.
-
Critical 9.8
redis-store deserializes untrusted data
Redis-store <=v1.3.0 allows unsafe objects to be loaded from redis
-
Unscored —
A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.
-
Unscored —
I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server bein…
-
High 7.5
CodeIgniter HTTP Header Injection
British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws.
-
Unscored —
A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
-
Unscored —
Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. An example of a Heap-Use-After-Free after the 'su…
-
Unscored —
InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user …
-
High 7.5
ejs vulnerable to DoS due to weak input validation
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()
-
Unscored —
InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a ma…
-
Unscored —
Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. By creating a large loop whiling pushing data to …
-
Unscored —
The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting…
-
Unscored —
The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. …
-
Critical 9.8
ejs is vulnerable to remote code execution due to weak input validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function
-
Medium 6.1
mde ejs vulnerable to XSS
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection
-
Medium 5.9
nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate
The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers …
-
Unscored —
tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon…
-
Unscored —
October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete …
-
Unscored —
tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privile…
-
Unscored —
tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler res…