Archive
13 December 2017
Vulnerabilities first published on this day (UTC), newest first.
104 results · Feed
-
Unscored —
An Information Disclosure vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.5, 5.2 and below versions allo…
-
Unscored —
A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the …
-
Unscored —
In Octopus Deploy before 4.1.3, the machine update process doesn't check that the user has access to all environments. …
-
Unscored —CVE-2017-17664 EPSS 32%
A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15…
-
Unscored —
In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious…
-
Unscored —
Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information dis…
-
Unscored —
Prior to 4.4.1.10, the Norton Family Android App can be susceptible to a Denial of Service (DoS) exploit. A DoS attack …
-
Unscored —
IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to i…
-
Unscored —CVE-2017-1635 Public exploit
IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use…
-
Unscored —
IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows…
-
Unscored —
IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to conduct phishing attacks, using an open redire…
-
Unscored —
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…
-
Unscored —
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build…
-
Unscored —
MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by conn…
-
Unscored —
Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertex…
-
Unscored —CVE-2017-17648 Public exploit
Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid par…
-
Unscored —
Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build…
-
Unscored —
Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who…
-
Unscored —
It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur. An attacker…
-
Unscored —CVE-2017-17585 Public exploit
FS Monster Clone 1.0 has SQL Injection via the Employer_Details.php id parameter.
-
Unscored —
Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the ba…
-
Unscored —CVE-2017-17615 Public exploit
Facebook Clone Script 1.0 has SQL Injection via the friend-profile.php id parameter.
-
Unscored —CVE-2017-17639 Public exploit
Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.
-
Unscored —CVE-2017-17631 Public exploit
Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter.
-
Unscored —CVE-2017-17619 Public exploit
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17576 Public exploit
FS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory.php sc parameter, or s…
-
Unscored —CVE-2017-17578 Public exploit
FS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.
-
Unscored —CVE-2017-17591 Public exploit
Realestate Crowdfunding Script 2.7.2 has SQL Injection via the single-cause.php pid parameter.
-
Unscored —CVE-2017-17628 Public exploit
Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.
-
Unscored —CVE-2017-17632 Public exploit
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
-
Unscored —CVE-2017-17637 Public exploit
Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.
-
Unscored —CVE-2017-17640 Public exploit
Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country p…
-
Unscored —CVE-2017-17633 Public exploit
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php…
-
Unscored —CVE-2017-17593 Public exploit
Simple Chatting System 1.0 allows Arbitrary File Upload via view/my_profile.php, which places files under uploads/.
-
Unscored —CVE-2017-17623 Public exploit
Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.
-
Unscored —CVE-2017-17635 Public exploit
MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php ev…
-
Unscored —CVE-2017-17580 Public exploit
FS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid parameter, or company_details…
-
Unscored —CVE-2017-17612 Public exploit
Hot Scripts Clone 3.1 has SQL Injection via the /categories subctid or mctid parameter.
-
Unscored —CVE-2017-17592 Public exploit
Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.
-
Unscored —CVE-2017-17625 Public exploit
Professional Service Script 1.0 has SQL Injection via the service-list city parameter.