HPESBHF03826 rev.1 - HPE Integrated Lights-Out 3 (iLO 3) Remote Denial of Service

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 3 iLO 3 1.88 - Unauthenticated Remote Denial of Service CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2017-8987 |...

EBCMS (News & Information Version) v1.8.2 Exists Arbitrary User Password Reset Vulnerability

EBCMS short for EBCMS is a modular plug-in website management system based on PHP+Mysql. EBCMS News v1.8.2 there are arbitrary user password reset vulnerability vulnerability. The vulnerability is due to the program logic checks are not strict , the attacker can remotely reset any user password...

Accellion FTA Device LDAP Injection Vulnerability

Accellion FTA devices is a file transfer device from Accellion USA. The device supports file transfer, file sharing, file transfer tracking and reporting, and more. An LDAP injection vulnerability exists in the home/seos/courier/ldaptest.html file in versions of Accellion FTA devices prior to...

CVE-2017-8304

An issue was discovered on Accellion FTA devices before FTA912180. courier/1000@/oauth/playground/callback.html allows XSS with a crafted URI...

WordPress WP External Links plugin cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WP External Links version 1.80. An attacker is able to inject malicious script...