54441 matches found
CVE-2017-18564
The sender plugin before 1.2.1 for WordPress has multiple XSS issues...
CVE-2017-18546
The jayj-quicktag plugin before 1.3.2 for WordPress has CSRF...
CVE-2017-18483
ANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID...
CVE-2017-18522
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book...
CVE-2017-18889
An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API...
CVE-2017-18414
cPanel before 67.9999.103 allows an open redirect in /unprotected/redirect.html SEC-300...
CVE-2017-18539
The weblibrarian plugin before 3.4.8.6 for WordPress has XSS via front-end short codes...
CVE-2017-18656
An issue was discovered on Samsung mobile devices with M6.0 and N7.x software. There is a buffer over-read in a trustlet. The Samsung ID is SVE-2017-8890 August 2017...
CVE-2017-18179
Progress Sitefinity 9.1 uses wrapaccesstoken as a non-expiring authentication token that remains valid after a password change or a session termination. Also, it is transmitted as a GET parameter. This is fixed in 10.1...
CVE-2017-18557
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues...
CVE-2017-18872
An issue was discovered in Mattermost Server before 4.4.3 and 4.3.3. Attackers could reconfigure an OAuth app in some cases where Mattermost is an OAuth 2.0 service provider...
CVE-2017-18674
An issue was discovered on Samsung mobile devices with N7.0 software. The time service aka Timaservice allows a kernel panic. The Samsung ID is SVE-2017-8593 May 2017...
CVE-2017-18485
Cognitoys Dino devices allow profilesadd.html CSRF...
CVE-2017-18647
An issue was discovered on Samsung mobile devices with M6,x and N7.0 software. The TA Scrypto v1.0 implementation in Secure Driver has a race condition with a resultant buffer overflow. The Samsung IDs are SVE-2017-8973, SVE-2017-8974, and SVE-2017-8975 November 2017...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
CVE-2019-18935
Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to the presence of CVE-2017-11317 or CVE-2017-11357, or other means. Exploitation can result in remote...
CVE-2017-18800
Certain NETGEAR devices are affected by reflected XSS. This affects R6700v2 before 1.1.0.42 and R6800 before 1.1.0.42...
CVE-2017-18709
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94...
CVE-2017-18790
Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R6700 before 1.0.1.26, R7000 before 1.0.9.10, R7100LG before 1.0.0.32, R7900 before 1.0.1.18, R8000 before 1.0.3.54, and R8500 before 1.0.2.100...