Archive
13 December 2017
Vulnerabilities first published on this day (UTC), newest first.
104 results · Feed
-
Unscored —CVE-2017-17606 Public exploit
Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
-
Unscored —CVE-2017-17582 Public exploit
FS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.
-
Unscored —CVE-2017-17638 Public exploit
Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.
-
Unscored —CVE-2017-17586 Public exploit
FS Olx Clone 1.0 has SQL Injection via the subpage.php scat parameter or the message.php pid parameter.
-
Unscored —CVE-2017-17622 Public exploit
Online Exam Test Application Script 1.6 has SQL Injection via the exams.php sort parameter.
-
Unscored —CVE-2017-17595 Public exploit
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter.
-
Unscored —
Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.
-
Unscored —CVE-2017-17602 Public exploit
Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.
-
Unscored —CVE-2017-17616 Public exploit
Event Search Script 1.0 has SQL Injection via the /event-list city parameter.
-
Unscored —CVE-2017-17624 Public exploit
PHP Multivendor Ecommerce 1.0 has SQL Injection via the single_detail.php sid parameter, or the category.php searchcat …
-
Unscored —CVE-2017-17618 Public exploit
Kickstarter Clone Script 2.0 has SQL Injection via the investcalc.php projid parameter.
-
Unscored —CVE-2017-17583 Public exploit
FS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.
-
Unscored —CVE-2017-17603 Public exploit
Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell…
-
Unscored —CVE-2017-17588 Public exploit
FS IMDB Clone 1.0 has SQL Injection via the movie.php f parameter, tvshow.php s parameter, or show_misc_video.php id pa…
-
Unscored —CVE-2017-17572 Public exploit
FS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.
-
Unscored —CVE-2017-17607 Public exploit
CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.
-
Unscored —
VMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful exploitation of this issue cou…
-
High 8.8
Improper sandboxing of a third-party component in tibbr
The tibbr user profiles components of tibbr Community, and tibbr Enterprise expose a weakness in an improperly sandboxed third-party component. Affected releases are TIBCO Software Inc. tibbr Community 5.2.1 and below; 6.0.0; 6.0.1; 7.0.0, tibbr Enterprise 5.…
-
High 8.1
SAML protocol handling errors in tibbr
The tibbr web server components of tibbr Community, and tibbr Enterprise contain SAML protocol handling errors which may allow authorized users to impersonate other users, and therefore escalate their access privileges. Affected releases are tibbr Community 5…
-
High 7.5
wolfSSL Bleichenbacher/ROBOT
wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."
-
High 7.5
BouncyCastle JCE TLS Bleichenbacher/ROBOT
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover th…
-
High 7.4
MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities
Man-In-The-Middle vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Man-in-the-middle attack.
-
High 7.3
MFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities
Cross-Site Request Forgery vulnerability in Micro Focus Project and Portfolio Management Center, version 9.32. This vulnerability could be exploited to allow a Cross-Site Forgery attack.
-
Unscored —
There is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of pngchunk_int.cpp in Ex…