OpenVPN Access Server 2.1.4 - CRLF Injection

CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via "%0A" characters in the PATHINFO to sessionstart/. id:...

OpenDreambox 2.0.0 - Remote Code Execution

OpenDreambox 2.0.0 is susceptible to remote code execution via the webadmin plugin. Remote attackers can execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI in enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py. id: CVE-2017-14135 info: nam...

Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local File Inclusion

Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 is susceptible to local file inclusion in public/examples/resources/getsource.php. This could allow remote attackers to read arbitrary files via the file parameter. id: CVE-2017-15363 info: name: Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local...

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken. id: CVE-2017-3132 info: name: Fortinet FortiOS 5.6.0 - Cross-Site Scripting author: ritikchaddh...

JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. id: CVE-2017-5983 info: name:...

Fortinet FortiOS < 5.6.0 - Cross-Site Scripting

A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN. id: CVE-2017-3133 info: name: Fortinet FortiOS 5.6.0 - Cross-Site Scripting author: ritikchaddha severity:...

Node.js <8.6.0 - Directory Traversal

Node.js before 8.6.0 allows remote attackers to access unintended files because a change to ".." handling is incompatible with the pathname validation used by unspecified community modules. id: CVE-2017-14849 info: name: Node.js 8.6.0 - Directory Traversal author: RandomRobbie severity: high...

Laravel <5.5.21 - Information Disclosure

Laravel through 5.5.21 is susceptible to information disclosure. An attacker can obtain sensitive information such as externally usable passwords via a direct request for the /.env URI. NOTE: CVE pertains only to the writeNewEnvironmentFileWith function in...

BOA Web Server 0.94.14 - Arbitrary File Access

BOA Web Server 0.94.14 is susceptible to arbitrary file access. The server allows the injection of "../.." using the FILECAMERA variable sent by GET to read files with root privileges and without using access credentials. id: CVE-2017-9833 info: name: BOA Web Server 0.94.14 - Arbitrary File Acces...

NETGEAR Routers - Authentication Bypass

NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices are susceptible to authentication bypass via simple crafted requests to the web management server. id: CVE-2017-5521 info: name: NETGEAR Routers - Authentication Bypass...

Joomla! <3.7.1 - SQL Injection

Joomla! before 3.7.1 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site. id: CVE-2017-8917 info: name: Joomla! 3.7.1 - SQL Injection...

Intelbras WRN 150 - Authentication Bypass

Intelbras WRN 150 router is vulnerable to authentication bypass through cookie manipulation. An attacker can bypass authentication and download the router configuration file by manipulating the admin:language cookie. id: CVE-2017-14942 info: name: Intelbras WRN 150 - Authentication Bypass author:...

CVE-2017-3648

creationtimestamp| type| source ---|---|--- 2026-07-29 13:01:34+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-07-30 00:02:02+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-08-01 14:00:04+00:00| seen|...

ROOT-OS-DEBIAN-12-CVE-2017-16232 CVE-2017-16232 in rootio-tiff - Patched by Root

Root has patched CVE-2017-16232 in the rootio-tiff package for Root:Debian:12. Multiple fixed versions available...

CVE-2017-3647

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-07-30 00:02:02+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-08-01 14:00:04+00:00| seen|...

CVE-2017-9789

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/OKWut8lgWWoAtxCwpHnIpyAUPUyUqVj9zDpLkuKPv2w9w 2026-07-30 00:02:02+00:00| seen| Telegram/OKWut8lgWWoAtxCwpHnIpyAUPUyUqVj9zDpLkuKPv2w9w 2026-08-01 15:00:05+00:00| seen|...

CVE-2017-17055

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/wfnGjcrSxYrJHm8vbWTioyHn81esb8AAAFVH2SxV4LrjZw 2026-07-30 00:02:02+00:00| seen| Telegram/wfnGjcrSxYrJHm8vbWTioyHn81esb8AAAFVH2SxV4LrjZw 2026-08-01 15:00:05+00:00| seen|...

CVE-2017-3649

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-07-30 00:02:02+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-08-01 14:00:04+00:00| seen|...

CVE-2017-3636

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-07-30 00:02:02+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-08-01 14:00:04+00:00| seen|...

CVE-2017-10279

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:45+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-07-30 00:02:02+00:00| seen| Telegram/-zzzJ6WyGgd0bbH69QyBWy0gZPvCZNNfcCn-gTP7taOVg 2026-08-01 14:00:04+00:00| seen|...