Skip to content
OpenAdvisories

Archive

26 January 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2017-17976 Public exploit EPSS 13%

    In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.

  • Unscored —
    CVE-2017-14521 Public exploit

    In WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to malicious File Upload.

  • Unscored —
    CVE-2017-14523 Public exploit

    WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. N…

  • Unscored —
    CVE-2018-6323 Public exploit

    The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU …