Archive

November 2017

Vulnerabilities first published in this month (UTC), newest first.

← October 2017 2017 / November December 2017 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2015-7501 Exploited Public exploit Scanner template EPSS 86%

Deserialization of Untrusted Data in Apache commons collections

Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal …

org.apache.servicemix.bundles:org.apache.servicemix.bundles.commons-collections commons-collections:commons-collections org.apache.servicemix.bundles:org.apache.servicemix.bundles.collections-generic org.apache.commons:commons-collections4 Debian Ubuntu Maven

Nov 9, 2017
Critical 9.8

CVE-2015-3933 Public exploit

MetalGenix GeniXCMS vulnerable to SQL Injection

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.

genix/cms Packagist

Nov 8, 2017