RHEL 6 / 7 : rh-nodejs6-nodejs (RHSA-2017:2908)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2908 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. T...

openSUSE Security Advisory (SUSE-SU-2025:1199-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : fontforge (SUSE-SU-2025:1199-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:1199-1 advisory. - CVE-2017-17521: Fixed command injection in help function uiutil.c bsc1073014 Tenable has extracted the...

CVE-2017-20146

creationtimestamp| type| source ---|---|--- 2025-04-11 23:51:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11527...

CVE-2017-18214

creationtimestamp| type| source ---|---|--- 2025-04-11 23:12:07+00:00| seen| Telegram/rw0-6qZL386lJcYRZxDk-KfHxiizqnrIbkLkCUN4YbWVYwM 2026-02-11 13:08:49+00:00| seen| https://gist.github.com/openclawqqq-lang/c6c4faedffd37d2115f8160f6f5da820...

CVE-2017-20154

creationtimestamp| type| source ---|---|--- 2025-04-11 14:51:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11429...

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...

Security update for fontforge

This update for fontforge fixes the following issues: CVE-2017-17521: Fixed command injection in help function uiutil.c bsc1073014 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

fontforge-20230101-6.1 on GA media (moderate)

fontforge-20230101-6.1 on GA media Announcement ID: openSUSE-SU-2025:14981-1 Rating: moderate Cross-References: CVE-2017-17521 CVSS scores: CVE-2017-17521 SUSE : 5.9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

CVE-2017-20166

creationtimestamp| type| source ---|---|--- 2025-04-09 17:47:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11126...

CVE-2017-16275

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11063...

CVE-2017-16274

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11062...

CVE-2017-16273

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11059...

CVE-2017-16271

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11057...

CVE-2017-16259

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11055...

CVE-2017-16258

creationtimestamp| type| source ---|---|--- 2025-04-09 13:47:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11046...

GHSA-3F7V-QX94-666M DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)

A bypass has been identified for the previously known vulnerability CVE-2017-0929, allowing unauthenticated attackers to execute arbitrary GET requests against target systems, including internal or adjacent networks. Impact This vulnerability facilitates a semi-blind SSRF attack, allowing attacke...

DotNetNuke.Core Vulnerable to Server-Side Request Forgery (SSRF)

A bypass has been identified for the previously known vulnerability CVE-2017-0929, allowing unauthenticated attackers to execute arbitrary GET requests against target systems, including internal or adjacent networks. Impact This vulnerability facilitates a semi-blind SSRF attack, allowing attacke...

CVE-2017-20197

creationtimestamp| type| source ---|---|--- 2025-04-09 11:47:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11042 2025-04-09 14:15:59+00:00| seen| https://t.me/cvedetector/22557...

CVE-2017-20197

A vulnerability was found in propanetank Roommate-Bill-Tracking up to 288437f658fc9ee7d4b92a9da12557024d8bc55c. It has been declared as critical. This vulnerability affects unknown code of the file /includes/login.php. The manipulation of the argument Username leads to sql injection. The attack c...