54441 matches found
CVE-2017-18518
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues...
CVE-2017-18572
The gnucommerce plugin before 1.4.2 for WordPress has XSS...
CVE-2017-18176
Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own code. This is fixed in 10.1...
CVE-2017-18443
cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...
CVE-2017-18605
The gravitate-qa-tracker plugin through 1.2.1 for WordPress has PHP Object Injection...
CVE-2017-18380
edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name...
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download SEC-279...
CVE-2017-18425
In cPanel before 66.0.2, the cpdavderrorlog file can be created with weak permissions SEC-280...
CVE-2017-18920
An issue was discovered in Mattermost Server before 3.6.2. The WebSocket feature does not follow the Same Origin Policy...
CVE-2017-18902
An issue was discovered in Mattermost Server before 4.1.0, 4.0.4, and 3.10.3. It allows attackers to discover team invite IDs via team API endpoints...
CVE-2017-18452
cPanel before 64.0.21 allows code execution via Rails configuration files SEC-259...
CVE-2017-18650
An issue was discovered on Samsung mobile devices with N7.x software. There is a WifiStateMachine IllegalArgumentException and reboot if a malformed wpasupplicant.conf is read. The Samsung ID is SVE-2017-9828 October 2017...
CVE-2017-18478
In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions SEC-207...
CVE-2017-18397
cPanel before 68.0.15 does not preserve permissions for local backup transport SEC-330...
CVE-2017-18676
An issue was discovered on Samsung mobile devices with N7.0 Qualcomm chipsets software. There is an RKP kernel protection bypass in which unwanted memory mappings may occur because of a lack of MSR trapping. The Samsung ID is SVE-2016-7901 April 2017...
CVE-2017-18856
NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection...
CVE-2017-18496
The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues...
CVE-2017-18694
An issue was discovered on Samsung mobile devices with software through 2016-10-25 Exynos5 chipsets. Attackers can read kernel addresses in the log because an incorrect format specifier is used. The Samsung ID is SVE-2016-7551 January 2017...