|
249361
|
8.8 |
HIGH
Network
|
open-xchange
|
open-xchange_appsuite
|
Open-Xchange GmbH OX App Suite 7.8.3 and earlier is affected by: Incorrect Access Control.
|
CWE-284
Improper Access Control
|
CVE-2017-6912
|
2024-11-21 12:30 |
2019-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249362
|
6.5 |
MEDIUM
Network
|
drupal
|
drupal
|
In Drupal 8.x prior to 8.3.7 When creating a view, you can optionally use Ajax to update the displayed data via filter parameters. The views subsystem/module did not restrict access to the Ajax endpo…
|
CWE-862
Missing Authorization
|
CVE-2017-6923
|
2024-11-21 12:30 |
2019-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249363
|
6.5 |
MEDIUM
Network
|
drupal
debian
|
drupal
debian_linux
|
In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visi…
|
CWE-552
Files or Directories Accessible to External Parties
|
CVE-2017-6922
|
2024-11-21 12:30 |
2019-01-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249364
|
5.9 |
MEDIUM
Network
|
drupal
|
drupal
|
In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services (rest) modu…
|
CWE-20
Improper Input Validation
|
CVE-2017-6921
|
2024-11-21 12:30 |
2019-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249365
|
7.4 |
HIGH
Network
|
drupal
|
drupal
|
In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST that are approved even if the user does not have permission to post approved comme…
|
CWE-269
Improper Privilege Management
|
CVE-2017-6924
|
2024-11-21 12:30 |
2019-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249366
|
9.8 |
CRITICAL
Network
|
drupal
|
drupal
|
In versions of Drupal 8 core prior to 8.3.7; There is a vulnerability in the entity access system that could allow unwanted access to view, create, update, or delete entities. This only affects entit…
|
NVD-CWE-noinfo
|
CVE-2017-6925
|
2024-11-21 12:30 |
2019-01-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249367
|
6.1 |
MEDIUM
Network
|
open-xchange
|
open-xchange_appsuite
|
Cross-site scripting (XSS) vulnerability in the Open-Xchange webmail before 7.6.3-rev28 allows remote attackers to inject arbitrary web script or HTML via the event attribute in a time tag.
|
CWE-79
Cross-site Scripting
|
CVE-2017-6913
|
2024-11-21 12:30 |
2018-09-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249368
|
9.8 |
CRITICAL
Network
|
drupal
|
drupal
|
Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary code due to the PECL YAML parser not handling PHP objects safely during certain operations.
|
CWE-19
Data Processing Errors
|
CVE-2017-6920
|
2024-11-21 12:30 |
2018-08-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249369
|
7.5 |
HIGH
Network
|
cisco
|
emergency_responder
finesse
hosted_collaboration_mediation_fulfillment
mediasense
prime_collaboration_assurance
prime_collaboration_provisioning
prime_license_manager
socialminer…
|
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to c…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-6779
|
2024-11-21 12:30 |
2018-06-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249370
|
5.5 |
MEDIUM
Local
|
flac_project
debian
fedoraproject
|
flac
debian_linux
fedora
|
An error in the "read_metadata_vorbiscomment_()" function (src/libFLAC/stream_decoder.c) in FLAC version 1.3.2 can be exploited to cause a memory leak via a specially crafted FLAC file.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2017-6888
|
2024-11-21 12:30 |
2018-04-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
