30 December 2017

24 results · Feed

• Unscored —
  CVE-2016-10704

  Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates tha…

  Dec 30, 2017
• Unscored —
  CVE-2017-17089

  custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the descrip…

  Dec 30, 2017
• Unscored —
  CVE-2017-14855

  Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request t…

  Dec 30, 2017
• Unscored —
  CVE-2017-17997

  In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. This was addressed in epan/dissect…

  wireshark wireshark wireshark Debian Ubuntu Alpine
  Dec 30, 2017
• Unscored —
  CVE-2017-12811

  PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.

  Dec 30, 2017
• Unscored —
  CVE-2017-12812

  PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab.

  Dec 30, 2017
• Unscored —
  CVE-2017-12810

  PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.

  Dec 30, 2017
• Unscored —
  CVE-2017-12813

  PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.

  Dec 30, 2017
• Unscored —
  CVE-2017-17989

  Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.

  Dec 30, 2017
• Unscored —
  CVE-2017-17983

  PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.

  Dec 30, 2017
• Unscored —
  CVE-2017-17987

  PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.

  Dec 30, 2017
• Unscored —
  CVE-2017-17988

  PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.

  Dec 30, 2017
• Unscored —
  CVE-2017-17985

  PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.

  Dec 30, 2017
• Unscored —
  CVE-2017-17982

  PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.

  Dec 30, 2017
• Unscored —
  CVE-2017-17990

  Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.

  Dec 30, 2017
• Unscored —
  CVE-2017-17981

  PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.

  Dec 30, 2017
• Unscored —
  CVE-2017-17986

  PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.

  Dec 30, 2017
• Unscored —
  CVE-2017-17993

  Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction req…

  Dec 30, 2017
• Unscored —
  CVE-2017-17994

  Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria …

  Dec 30, 2017
• Unscored —
  CVE-2017-17984

  PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.

  Dec 30, 2017
• Unscored —
  CVE-2017-17991

  Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.

  Dec 30, 2017
• Unscored —
  CVE-2017-17992

  Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the inde…

  Dec 30, 2017
• Unscored —
  CVE-2017-17995

  Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.

  Dec 30, 2017
• Unscored —
  CVE-2017-17975

  Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 30, 2017