Skip to content
OpenAdvisories

Archive

24 December 2017

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2017-17849 Public exploit EPSS 19%

    A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to exe…

  • Unscored —
    CVE-2017-17872 Public exploit

    The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.

  • Unscored —
    CVE-2017-17873 Public exploit

    Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.

  • Unscored —
    CVE-2017-17874 Public exploit

    Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product…

  • Unscored —
    CVE-2017-17871 Public exploit

    The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags actio…