Archive
18 December 2017
Vulnerabilities first published on this day (UTC), newest first.
31 results · Feed
-
High 8.8
Apache Sling Authentication Service vulnerability
A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.
-
High 7.8
Information Exposure in Heketi
An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.
-
High 8.8
Heketi Arbitrary Code Execution
A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and poss…
-
Unscored —
An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper i…
-
Unscored —
A Session Fixation Vulnerability exists in the MT4 Networks SenhaSegura Web Application 2.2.23.8 via login_if.php.
-
Unscored —
Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unaut…
-
Unscored —
Zivif PR115-204-P-RS V2.3.4.2103 web cameras contain a hard-coded cat1029 password for the root user. The SONIX operati…
-
Unscored —CVE-2017-17106 EPSS 15%
Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a …
-
Unscored —
Insecure Permissions vulnerability in db.php file in GPWeb 8.4.61 allows remote attackers to view the password and user…
-
Unscored —
SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Unrestricted File Upload vulnerability in GPWeb 8.4.61 allows remote authenticated users to upload any type of file, in…
-
Unscored —
The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software…
-
Unscored —CVE-2017-17721 Public exploit
CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, as…
-
Medium 5.4
Apache Drill vulnerable to Cross-site Scripting
In Apache Drill 1.11.0 and earlier when submitting form from Query page users are able to pass arbitrary script or HTML which will take effect on Profile page afterwards. Example: after submitting special script that returns cookie information from Query page…
-
Unscored —
NetApp Clustered Data ONTAP versions 9.x prior to 9.1P10 and 9.2P2 are susceptible to a vulnerability which allows an a…
-
Unscored —CVE-2017-17651 Public exploit
Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum par…
-
Unscored —CVE-2017-17649 Public exploit
Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
-
Unscored —CVE-2017-17645 Public exploit
Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.
-
Unscored —CVE-2017-17643 Public exploit
FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.
-
Unscored —
The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information …
-
Unscored —
CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.
-
Unscored —
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html…
-
Unscored —
contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the memberof overlay are en…
-
Unscored —
CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.
-
Unscored —CVE-2017-17738 Public exploit
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tool…
-
Unscored —CVE-2017-17737 Public exploit
The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_dia…
-
Unscored —
DedeCMS through 5.7 has SQL Injection via the logo parameter to plus/flink_add.php.
-
Unscored —
DedeCMS through 5.6 allows arbitrary file upload and PHP code execution by embedding the PHP code in a .jpg file, which…
-
Unscored —
DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.
-
Unscored —CVE-2017-17733 EPSS 44%
Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.
-
Unscored —CVE-2017-16997 Public exploit
elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIG…