CVE-2017-20112

creationtimestamp| type| source ---|---|--- 2022-06-29 12:37:16+00:00| seen| https://t.me/cibsecurity/45349...

CVE-2017-20109

creationtimestamp| type| source ---|---|--- 2022-06-29 12:37:16+00:00| seen| https://t.me/cibsecurity/45350...

CVE-2017-20108

creationtimestamp| type| source ---|---|--- 2022-06-29 12:37:15+00:00| seen| https://t.me/cibsecurity/45348...

CVE-2017-20112

A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument --up cmd leads to improper privilege management. The attack needs to be approached locally. The exploit has been...

CVE-2017-20112

CVE-2017-20112 affects IVPN Client 2.6.6120.33863. The issue is a mismanagement of permissions for the parameter --up cmd, enabling a local attacker to escalate privileges. The vulnerability is described as affecting an unknown functionality and is classified as critical. The exploit has been pub...

CVE-2017-20111 Teleopti WFM Administration privileges management

A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the component Administration. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

CVE-2017-20111

The CVE-2017-20111 entry relates to Teleopti WFM 7.1.0, affecting an unspecified part of the Administration component. The issue is described as a critical improper privilege management vulnerability that can be exploited remotely, with public exploit disclosure indicated. A patch is recommended ...

CVE-2017-20110

Teleopti WFM ≤ 7.1.0 is affected by an information-disclosure vulnerability in the Administration JSON handling. The issue allows disclosure of credentials via remote JSON manipulation, with the exploit publicly disclosed. CVSSv3.1 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (base score 7.5). Pro...

CVE-2017-20110 Teleopti WFM Administration Credentials information disclosure

A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown functionality of the component Administration. The manipulation as part of JSON leads to information disclosure Credentials. The attack may be launched remotely...

CVE-2017-20109 Teleopti WFM Administration GetOneTenant Credentials information disclosure

A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality of the file /TeleoptiWFM/Administration/GetOneTenant of the component Administration. The manipulation leads to information disclosure Credentials. The attac...

CVE-2017-20108 Easy Table Plugin options-general.php cross site scripting

A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-admin/options-general.php. The manipulation with the input "alert1 leads to basic cross site scripting. It is possible to initiate the attack remotely...

CVE-2017-20108

CVE-2017-20108 affects Easy Table Plugin 1.6 for WordPress. The vulnerability exists in /wordpress/wp-admin/options-general.php where input manipulation (notably including the string ">) can trigger a cross-site scripting (XSS) vulnerability. Exploitation is possible remotely. Documents consis...

[SECURITY] [DLA 3058-1] libsndfile security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3058-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 26, 2022 https://wiki.debian.org/LTS -...

CVE-2017-20106

A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument uploadurl leads to server-side request forgery. The attack needs to be approached...

CVE-2017-20105

A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument path with the input ..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd leads to path traversal. The...

CVE-2017-20107

A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The manipulation leads to improper privilege management. Local access is required to approach this attack. The exploit has been disclosed to the public and may be...

CVE-2017-20107

A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The manipulation leads to improper privilege management. Local access is required to approach this attack. The exploit has been disclosed to the public and may be...

CVE-2017-20107

The CVE-2017-20107 entry concerns ShadeYouVPN.com Client 2.0.1.11, where an unknown function is involved in privilege management, allowing local privilege escalation. The vulnerability is described as affecting local access with complete impact on confidentiality, integrity, and availability, and...

CVE-2017-20107 ShadeYouVPN.com Client privileges management

A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The manipulation leads to improper privilege management. Local access is required to approach this attack. The exploit has been disclosed to the public and may be...

CVE-2017-20106 Lithium Forum Compose Message server-side request forgery

A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of the component Compose Message Handler. The manipulation of the argument uploadurl leads to server-side request forgery. The attack needs to be approached...