86 matches found
EUVD-2026-0717
A vulnerability has been found in EmpireSoft EmpireCMS up to 8.0. Impacted is the function CheckSaveTranFiletype of the file e/class/connect.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2020-0717
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0716...
CVE-2012-0717
IBM WebSphere Application Server 7.0 before 7.0.0.23, when a certain SSLv2 configuration with client authentication is used, allows remote attackers to bypass X.509 client-certificate authentication via unspecified vectors...
WordPress Social Slider Feed plugin < 2.2.9 - Admin+ Stored XSS vulnerability
Admin+ Stored XSS vulnerability discovered by Krugov Artyom in WordPress Plugin Social Slider Feed versions 2.2.9...
CVE-2025-0717
To exploit the vulnerability, it is necessary:...
CVE-2025-0717 Social Slider Feed < 2.2.9 - Admin+ Stored XSS
To exploit the vulnerability, it is necessary:...
CVE-2025-0717
CVE-2025-0717 affects the WordPress plugin Social Slider Feed until version 2.2.9 (older releases are vulnerable to Admin+ Stored XSS). The issue is triggered in the plugin’s admin context and can be mitigated by upgrading to 2.2.9 or newer (or applying vendor-recommended remediation).
Photon OS 3.0: Powershell PHSA-2024-3.0-0717
An update of the powershell package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0717. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Gnutls PHSA-2024-3.0-0717
An update of the gnutls package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0717. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Splunk Enterprise 9.0.0 < 9.0.10, 9.1.0 < 9.1.5, 9.2.0 < 9.2.2 (SVD-2024-0717)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2024-0717 advisory. - In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312, an admin user...
RHSA-2024:0717
creationtimestamp| type| source ---|---|--- 2024-02-07 15:17:04+00:00| seen| https://t.me/ctinow/180738...
CVE-2024-0717
Affects a wide range of D-Link devices (e.g., DAP-1360, DIR-300, DIR-615, DIR-620, DVG-series, Good Line Router v2, and others) with the vulnerability residing in the HTTP GET Request Handler for /devinfo. The underlying issue is improper handling of the area parameter, where input such as notice...
CVE-2024-0717 D-Link Good Line Router v2 HTTP GET Request devinfo information disclosure
A vulnerability classified as critical was found in D-Link DAP-1360, DIR-300, DIR-615, DIR-615GF, DIR-615S, DIR-615T, DIR-620, DIR-620S, DIR-806A, DIR-815, DIR-815AC, DIR-815S, DIR-816, DIR-820, DIR-822, DIR-825, DIR-825AC, DIR-825ACF, DIR-825ACG1, DIR-841, DIR-842, DIR-842S, DIR-843, DIR-853,...
Debian: Security Advisory (DSA-2014-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-0717
creationtimestamp| type| source ---|---|--- 2023-02-08 07:23:53+00:00| seen| Telegram/BK4p4u8y0cQegLLYFtp8d3RyNccFWJNuH81RUGBKD2Ul2Hw...
CVE-2023-0717
The CVE-2023-0717 entry concerns the Wicked Folders WordPress plugin. A missing capability check in the ajax_delete_folder function in versions up to and including 2.18.16 allows authenticated users with subscriber-level permissions and above to perform administrator-only actions (modifying the f...
WordPress Wicked Folders Plugin <= 2.18.16 is vulnerable to Broken Access Control
Software Wicked Folders Type Plugin Vulnerable versions = 2.18.16 Fixed in 2.18.17 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-0717 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID db3e0ac8c3e4 Credits Marco Wotschka Requir...
CVE-2022-0717
Out-of-bounds Read in GitHub repository mruby/mruby prior to 3.2...