Skip to content
OpenAdvisories

Archive

28 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /28 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2017-17045

    An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sens…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17044

    An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop an…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17046

    An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive informatio…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17043 Scanner template

    The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content…

  • High 7.5
    CVE-2017-17042

    Arbitrary file read vulnerability in yard server

    lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.

    yard yard yard Debian Ubuntu RubyGems
  • Unscored —
    CVE-2017-9315

    Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary pass…

    Dahua Dahua IP Camera and IP PTZ IPC-HFW1XXX, IPC-HDW1XXX, IPC-HDBW1XXX, IPC-HFW2XXX, IPC-HDW2XXX, IPC-HDBW2XXX, IPC-HFW4XXX, IPC-HDW4XXX, IPC-HDBW4XXX, IPC-HF5XXX, IPC-HFW5XXX, IPC-HDW5XXX, IPC-H
  • Unscored —
    CVE-2017-16952 Public exploit

    KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.

  • Unscored —
    CVE-2017-16951 Public exploit

    Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, …

  • Unscored —
    CVE-2017-15673

    The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2016-10702

    Pebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an arbitrary application's…

  • Unscored —
    CVE-2017-8020

    An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially all…

  • Unscored —
    CVE-2017-8001

    An issue was discovered in EMC ScaleIO 2.0.1.x. In a Linux environment, one of the support scripts saves the credential…

  • Unscored —
    CVE-2017-8019

    An issue was discovered in EMC ScaleIO 2.0.1.x. A vulnerability in message parsers (MDM, SDS, and LIA) could potentiall…

  • Unscored —
    CVE-2017-14379

    EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exp…

  • Unscored —
    CVE-2017-14389

    An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versio…

  • Unscored —
    CVE-2016-10701

    In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.