Archive
December 2017
Vulnerabilities first published in this month (UTC), newest first.
1,107 results · Feed
-
Unscored —
FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.
-
Unscored —
FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name parameter to user/edit_pr…
-
High 7.5
Dolibarr sensitive information disclosure
Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.
-
Unscored —
A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to exe…
-
Unscored —
Readymade Video Sharing Script has CSRF via user-profile-edit.php.
-
Critical 9.8
Dolibarr SQL injection vulnerability in comm/multiprix.php
SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
-
Critical 9.8
Dolibarr SQL injection vulnerability in fourn/index.php
SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter.
-
Unscored —
Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search p…
-
Unscored —
Readymade Job Site Script has XSS via the keyword parameter to the /job URI.
-
Unscored —
Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or…
-
Unscored —
Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.
-
Critical 9.8
Dolibarr SQL injection vulnerability in adherents/subscription/info.php
SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter.
-
Unscored —
Readymade Job Site Script has CSRF via the /job URI.
-
Unscored —CVE-2017-17888 EPSS 28%
cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500…
-
Unscored —
Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks t…
-
Unscored —
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, w…
-
Unscored —
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.…
-
Unscored —
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, whic…
-
Unscored —
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which …
-
Unscored —
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, wh…
-
Unscored —
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which …
-
Unscored —
In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which …
-
Unscored —
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp…
-
Unscored —
In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c…
-
Unscored —
An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of…
-
Unscored —
An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device…
-
Unscored —CVE-2017-17872 Public exploit
The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.
-
Unscored —CVE-2017-17873 Public exploit
Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.
-
Unscored —CVE-2017-17874 Public exploit
Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product…
-
Unscored —CVE-2017-17871 Public exploit
The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags actio…
-
Unscored —CVE-2017-17870 Public exploit
The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.
-
Unscored —
In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p…
-
Unscored —
The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.
-
High 8.1
passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign th…
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data t…
-
Unscored —
pdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair operation occurs during …
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it would still be proces…
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship between pointer values a…
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corrup…
-
Unscored —
kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corrup…