Archive
20 November 2017
Vulnerabilities first published on this day (UTC), newest first.
26 results · Feed
-
High 8.8
An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS fi…
-
High 8.8
An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XL…
-
High 8.8
An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XL…
-
High 8.8
An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially cr…
-
High 8.8
An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A special…
-
Unscored —
In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for…
-
Unscored —
In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action.
-
Unscored —
In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action.
-
Unscored —
A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, al…
-
Unscored —
By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that …
-
Unscored —
The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled dur…
-
Unscored —
LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences …
-
Unscored —
A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to cr…
-
Unscored —
Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a …
-
Unscored —CVE-2017-16902 Public exploit
On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or log…
-
Unscored —
An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack …
-
Unscored —
The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, …
-
Unscored —
A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, al…
-
Unscored —
A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login pa…
-
Unscored —
The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contain…
-
High 8.8
In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, use…
-
Unscored —
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling…
-
Unscored —
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete fir…
-
Unscored —
An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in O…
-
Medium 4.3
Moodle Exposure of Sensitive Information to an Unauthorized Actor
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing em…
-
Unscored —
In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passw…