|
255061
|
6.1 |
MEDIUM
Network
|
genixcms
|
genixcms
|
In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14762
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255062
|
6.1 |
MEDIUM
Network
|
genixcms
|
genixcms
|
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14761
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255063
|
9.8 |
CRITICAL
Network
|
eventespresso
|
event_espresso_lite
|
SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for WordPress via the recurrence_id parameter to /wp-admin/admin.…
|
CWE-89
SQL Injection
|
CVE-2017-14760
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255064
|
5.4 |
MEDIUM
Network
|
eyesofnetwork
|
eyesofnetwork
|
Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script or HTML via the filter parameter to mod…
|
CWE-79
Cross-site Scripting
|
CVE-2017-14753
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255065
|
6.1 |
MEDIUM
Network
|
intensewp
|
wp_jobs
|
The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field.
|
CWE-79
Cross-site Scripting
|
CVE-2017-14751
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255066
|
7.8 |
HIGH
Local
|
jerryscript
|
jerryscript
|
JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js file, because unrecog…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-14749
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255067
|
5.3 |
MEDIUM
Network
|
blizzard
|
overwatch
|
Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by leaving a competitive match at a specific t…
|
CWE-362
Race Condition
|
CVE-2017-14748
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255068
|
7.8 |
HIGH
Local
|
gnu
|
binutils
|
The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead of an error flag, w…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2017-14745
|
2024-11-21 12:13 |
2017-09-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255069
|
8.8 |
HIGH
Network
|
claydip
|
airbnb_clone
|
Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code …
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2017-14704
|
2024-11-21 12:13 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
255070
|
7.2 |
HIGH
Network
|
citrix
|
netscaler_gateway_firmware application_delivery_controller_firmware
|
A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e…
|
CWE-287
Improper Authentication
|
CVE-2017-14602
|
2024-11-21 12:13 |
2017-09-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|