Archive
11 December 2017
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Unscored —CVE-2014-8358 Public exploit
Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014…
-
Unscored —CVE-2017-11319 Public exploit
Perspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access level permissions and …
-
Unscored —CVE-2017-17111 Public exploit
Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-detai…
-
Unscored —CVE-2017-17110 Public exploit
Techno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php?id= request.
-
Critical 9.8
Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote…
KEV Aug 18, 2022 -
Critical 9.8
Remote Code Execution in Apache Synapse
In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by inject…