|
252541
|
8.6 |
HIGH
Network
|
wbce
|
wbce_cms
|
Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
|
CWE-22
Path Traversal
|
CVE-2017-2119
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252542
|
6.1 |
MEDIUM
Network
|
wbce
|
wbce_cms
|
Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2017-2118
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252543
|
4.9 |
MEDIUM
Network
|
cubecart
|
cubecart
|
Directory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with administrator rights to read arbitrary files via unspecified vectors.
|
CWE-22
Path Traversal
|
CVE-2017-2117
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252544
|
4.3 |
MEDIUM
Network
|
cybozu
|
office
|
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2017-2116
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252545
|
4.3 |
MEDIUM
Network
|
cybozu
|
office
|
Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2017-2115
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252546
|
5.4 |
MEDIUM
Network
|
cybozu
|
office
|
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2017-2114
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252547
|
8.8 |
HIGH
Adjacent
|
iodata
|
ts-ptcam\/poe_firmware ts-ptcam_firmware ts-wrlc_firmware ts-wlc2_firmware ts-wlce_firmware ts-wptcam2_firmware ts-wptcam_firmware
|
Buffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmwar…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-2113
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252548
|
8.8 |
HIGH
Adjacent
|
iodata
|
ts-ptcam\/poe_firmware ts-ptcam_firmware ts-wrlc_firmware ts-wlc2_firmware ts-wlce_firmware ts-wptcam2_firmware ts-wptcam_firmware
|
TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earlier, TS-WRLC firmware version 1.17 and …
|
CWE-78
OS Command
|
CVE-2017-2112
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252549
|
6.1 |
MEDIUM
Network
|
iodata
|
ts-ptcam\/poe_firmware ts-ptcam_firmware ts-wrlc_firmware ts-wlc2_firmware ts-wlce_firmware ts-wptcam2_firmware ts-wptcam_firmware
|
HTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware version 1.18 and earlier, TS-WLC2 firmware version 1.18 and earl…
|
CWE-93
CRLF Injection
|
CVE-2017-2111
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
252550
|
5.9 |
MEDIUM
Network
|
nissan_securities
|
access_cx
|
The Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sen…
|
CWE-295
Improper Certificate Validation
|
CVE-2017-2110
|
2024-11-21 12:22 |
2017-04-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|