Archive
3 January 2018
Vulnerabilities first published on this day (UTC), newest first.
57 results · Feed
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or pos…
-
Unscored —
Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.
-
Unscored —
Online Ticket Booking has CSRF via admin/movieedit.php.
-
Unscored —
Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.
-
Unscored —
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.
-
Unscored —
Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.
-
Unscored —
Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.
-
Unscored —
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.
-
Unscored —
The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restr…
-
Unscored —
EmbedThis GoAhead Webserver version 4.0.0 is vulnerable to a NULL pointer dereference in the CGI handler resulting in m…
-
Critical 9.8
Inadequate Encryption Strength
Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
KEV Jan 10, 2022 -
Critical 9.8
Cobbler vulnerable to arbitrary code execution
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.
-
Unscored —
BookStack version 0.18.4 is vulnerable to stored cross-site scripting, within the page creation page, which can result …
-
Unscored —
Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensitive authen…
-
Critical 9.8CVE-2017-1000487 Public exploit
OS Command Injection in Plexus-utils
Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.
-
Unscored —
Linux Dash up to version v2 is vulnerable to multiple command injection vulnerabilities in the way module names are par…
-
Unscored —
EmbedThis GoAhead Webserver versions 4.0.0 and earlier is vulnerable to an integer overflow in the HTTP listener result…
-
Medium 6.1
Plone Open Redirect
By linking to a specific url in Plone 2.5-5.1rc1 with a parameter, an attacker could send you to his own website. On its own this is not so bad: the attacker could more easily link directly to his own website instead. But in combination with another attack, y…
-
Unscored —
In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of…
-
Unscored —
Brave Software's Brave Browser, version 0.19.73 (and earlier) is vulnerable to an incorrect access control issue in the…
-
Unscored —
pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged …
-
Critical 9.8
Smarty PHP code injection
Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.
-
Medium 6.1
Products.CMFPlone Open Redirect Vulnerability
When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you tried to view before. An attacker might try to abuse this by …
-
Unscored —
ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which a…
-
Medium 6.5
Plone Unauthorized Access Vulnerability
Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part of the hotfix is only relevant for Plone 4 and 5.
-
Medium 5.4
Products.CMFPlone XSS in profile home_page property
A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.
-
Unscored —
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbit…
-
High 7.5
XXE Vulnerability in XMLBundle 0.1.7
XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks.
-
High 8.1
Disabled users able to log in with third party SSO plugin
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
-
Medium 6.5
Mautic users able to download any files from server using filemanager
Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.
-
Medium 6.1
Inline JS XSS vulnerability in Mautic
Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form.