|
247561
|
6.1 |
MEDIUM
Network
|
anyvar_project
|
anyvar
|
Persistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1.
|
CWE-79
Cross-site Scripting
|
CVE-2017-6103
|
2024-11-21 12:29 |
2017-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247562
|
6.1 |
MEDIUM
Network
|
rockhoist_badges_project
|
rockhoist_badges_plugin
|
Persistent XSS in wordpress plugin rockhoist-badges v1.2.2.
|
CWE-79
Cross-site Scripting
|
CVE-2017-6102
|
2024-11-21 12:29 |
2017-03-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247563
|
8.6 |
HIGH
Network
|
openidc
|
mod_auth_openidc
|
The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" (aka mod_auth_openidc) module before 2.1.6 for the Apache HTTP Server does not skip OIDC_CLAIM_ and OIDCAuthNHeader headers in an "Aut…
|
CWE-287
Improper Authentication
|
CVE-2017-6413
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247564
|
5.5 |
MEDIUM
Local
|
kde
|
kdelibs kio
|
kpac/script.cpp in KDE kio before 5.32 and kdelibs before 4.14.30 calls the PAC FindProxyForURL function with a full https URL (potentially including Basic Authentication credentials, a query string,…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2017-6410
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247565
|
9.8 |
CRITICAL
Network
|
veritas
|
netbackup_appliance netbackup
|
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Unauthenticated CORBA interfaces permit inappropriate access.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2017-6409
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247566
|
7.0 |
HIGH
Local
|
veritas
|
netbackup_appliance netbackup
|
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. A local-privilege-escalation race condition in pbx_exchange can occur when a local user connects …
|
CWE-362
Race Condition
|
CVE-2017-6408
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247567
|
8.8 |
HIGH
Local
|
veritas
|
netbackup_appliance netbackup
|
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Privileged remote command execution on NetBackup Server and Client (on the server or a connected client…
|
NVD-CWE-noinfo
|
CVE-2017-6407
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247568
|
8.8 |
HIGH
Local
|
veritas
|
netbackup_appliance netbackup access
|
An issue was discovered in Veritas NetBackup Before 7.7.2 and NetBackup Appliance Before 2.7.2. Arbitrary privileged command execution, using whitelist directory escape with "../" substrings, can occ…
|
NVD-CWE-noinfo
|
CVE-2017-6406
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247569
|
7.5 |
HIGH
Network
|
veritas
|
netbackup_appliance netbackup
|
An issue was discovered in Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier. Hostname-based security is open to DNS spoofing.
|
CWE-290
Authentication Bypass by Spoofing
|
CVE-2017-6405
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247570
|
5.5 |
MEDIUM
Local
|
veritas
|
netbackup netbackup_appliance
|
An issue was discovered in Veritas NetBackup Before 7.7 and NetBackup Appliance Before 2.7. There are world-writable log files, allowing destruction or spoofing of log data.
|
CWE-276
Incorrect Default Permissions
|
CVE-2017-6404
|
2024-11-21 12:29 |
2017-03-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|