Archive
November 2017
Vulnerabilities first published in this month (UTC), newest first.
1,068 results · Feed
-
Unscored —
A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Pl…
-
Unscored —
A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker …
-
Unscored —
A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verific…
-
Unscored —
A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a com…
-
Unscored —
A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome mes…
-
Unscored —
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject a…
-
Unscored —
A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow …
-
Unscored —
A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attac…
-
Unscored —
A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, …
-
Unscored —
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject a…
-
Unscored —
A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Pl…
-
Unscored —
A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player…
-
Unscored —
Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject a…
-
Unscored —
Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and…
-
Unscored —
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. Authenticated users with permissions t…
-
Unscored —
An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. There are multiple reflected Cross-Sit…
-
Unscored —
An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. An information disclosure caused by a …
-
Unscored —
Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through …
-
Unscored —CVE-2017-14186 Scanner template
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions u…
-
Unscored —
An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webU…
-
Critical 9.8
The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denia…
-
Critical 9.8CVE-2017-8817 EPSS 11%
The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-o…
-
Unscored —
curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access a…
-
Unscored —
EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Se…
-
Unscored —
EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authent…
-
Unscored —CVE-2017-17059 Scanner template
XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress vi…
-
Unscored —
An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The i…
-
High 7.5
The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooc…
-
Medium 5.5
Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.
-
Unscored —
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possi…
-
Unscored —
The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new …
-
Unscored —
The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correct…
-
Unscored —
TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possi…
-
Unscored —
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sens…
-
Unscored —
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop an…
-
Unscored —
An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive informatio…
-
Unscored —CVE-2017-17043 Scanner template
The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content…
-
High 7.5
Arbitrary file read vulnerability in yard server
lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct directory traversal attacks and read arbitrary files.
-
Unscored —
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary pass…