CVE-2017-6737

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:41+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971329 2025-02-23 02:10:16+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2017-8543

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 06:24:36+00:00| seen| https://t.me/arpsyndicate/1409 2024-12-24 20:31:22+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971577 2025-02-23 02:10:16+00:00|...

CVE-2017-0210

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 06:34:31+00:00| seen| https://t.me/arpsyndicate/1411 2024-12-24 20:31:24+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971579 2025-02-14 10:03:10+00:00|...

ksakosher.org Cross Site Scripting vulnerability OBB-3430658

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-12145 · Tp5Cms · Tp5Cms

Name of the Vulnerable Software and Affected Versions: tp5cms versions through 2017-05-25 Description: An issue was discovered in the software, where the "admin.php/system/set.html" endpoint has a cross-site scripting XSS vulnerability via the keywords parameter. Recommendations: For versions...

EulerOS Virtualization 3.0.6.0 : php (EulerOS-SA-2023-2243)

According to the versions of the php packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The zendstringextend function in Zend/zendstring.h in PHP through 7.1.5 does not prevent changes to string objects that result in a...

Huawei EulerOS: Security Advisory for php (EulerOS-SA-2023-2243)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

visionfilms.net Cross Site Scripting vulnerability OBB-3409590

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zahnarztpraxis-noe-eberl.de Cross Site Scripting vulnerability OBB-3406563

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities

Summary IBM QRadar User Behavior Analytics contains vulnerable packages/components and that may be identified and potentially exploited. The packages have been updated in the latest release and the vulnerabilities identified in the CVEs have been addressed. Please follow the instructions in the...

CVE-2017-20185

CVE-2017-20185 affects Fuzzy SWMP. The vulnerability lies in swmp.php’s GET Parameter Handler, where manipulating the theme argument enables cross-site scripting. Impact is client-side script execution with remote feasibility; exploitation details are publicly disclosed. Patch identifier 792bcab6...

CVE-2017-6195

creationtimestamp| type| source ---|---|--- 2023-06-02 16:35:39+00:00| published-proof-of-concept| https://t.me/crackcodes/3597...

barbers.k12.hi.us Cross Site Scripting vulnerability OBB-3373984

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2023-2017)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-15371 affecting package sox for versions less than 14.4.2.0-33

CVE-2017-15371 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33

CVE-2017-15370 affecting package sox for versions less than 14.4.2.0-33. A patched version of the package is available...

Security Bulletin: There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises

Summary IBM Engineering Requirements Quality Assistant On-Premises affected by multiple vulnerabilities due to which an attacker could exploit this vulnerability to execute arbitrary code on the system and cause the application to crash cause a denial of service condition on the system. This...

GLSA-202305-28 : snakeyaml: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202305-28 snakeyaml: Multiple Vulnerabilities - The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564. CVE-2017-18640 - Using snakeYAML to parse untrusted YAML...

Carlo Gavazzi Powersoft

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity/public exploits are available Vendor: Carlo Gavazzi Equipment: Powersoft Vulnerabilities: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access and...

8220 Gang Exploiting Oracle WebLogic Flaw to Hijack Servers and Mine Cryptocurrency

The notorious cryptojacking group tracked as 8220 Gang has been spotted weaponizing a six-year-old security flaw in Oracle WebLogic servers to ensnare vulnerable instances into a botnet and distribute cryptocurrency mining malware. The flaw in question is CVE-2017-3506 CVSS score: 7.4, which, whe...