Skip to content
OpenAdvisories

Archive

20 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /20 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Unscored —
    CVE-2017-5259 Public exploit EPSS 33%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5255 Public exploit EPSS 74%

    In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the we…

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5254 Public exploit EPSS 52%

    In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have th…

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5262 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has acces…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5261 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web a…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5260 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration fi…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2012-2576 Public exploit EPSS 60%

    SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Pro…

  • Unscored —
    CVE-2017-17752 Public exploit

    Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code execut…