Skip to content
OpenAdvisories

Archive

11 December 2017

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2014-8358 Public exploit

    Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014…

  • Unscored —
    CVE-2017-11319 Public exploit

    Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and …

  • Unscored —
    CVE-2017-17111 Public exploit

    Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-detai…

  • Unscored —
    CVE-2017-17110 Public exploit

    Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.

  • Critical 9.8
    CVE-2017-15944 Exploited Public exploit Scanner template EPSS 98%

    Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote…

    KEV Aug 18, 2022
  • Critical 9.8
    CVE-2017-15708 Public exploit EPSS 18%

    Remote Code Execution in Apache Synapse

    In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by inject…