|
250041
|
6.1 |
MEDIUM
Network
|
agora-project
|
agora-project
|
XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.
|
CWE-79
Cross-site Scripting
|
CVE-2017-6560
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250042
|
6.1 |
MEDIUM
Network
|
agora-project
|
agora-project
|
XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.
|
CWE-79
Cross-site Scripting
|
CVE-2017-6559
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250043
|
9.8 |
CRITICAL
Network
|
iball
|
ib-wra150n_firmware
|
iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2017-6558
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250044
|
5.4 |
MEDIUM
Network
|
cmsmadesimple
|
cms_made_simple
|
Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings …
|
CWE-79
Cross-site Scripting
|
CVE-2017-6556
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250045
|
5.4 |
MEDIUM
Network
|
cmsmadesimple
|
cms_made_simple
|
Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description paramet…
|
CWE-79
Cross-site Scripting
|
CVE-2017-6555
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250046
|
7.5 |
HIGH
Network
|
sagemcom
|
livebox_firmware
|
Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2017-6552
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250047
|
8.8 |
HIGH
Network
|
asus
|
rt-ac53_firmware
|
Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B…
|
CWE-287
Improper Authentication
|
CVE-2017-6549
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250048
|
9.8 |
CRITICAL
Network
|
asus
|
rt-ac53_firmware
|
Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-A…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-6548
|
2024-11-21 12:30 |
2017-03-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250049
|
7.5 |
HIGH
Network
|
synchro
|
bbs
|
Synchronet BBS 3.16c for Windows allows remote attackers to cause a denial of service (service crash) via a long string in the HTTP Referer header.
|
NVD-CWE-noinfo
|
CVE-2017-6371
|
2024-11-21 12:29 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
250050
|
8.1 |
HIGH
Network
|
libgd
|
libgd
|
In the GD Graphics Library (aka LibGD) through 2.2.5, there is a heap-based buffer over-read in tiffWriter in gd_tiff.c. NOTE: the vendor says "In my opinion this issue should not have a CVE, since t…
|
CWE-125
Out-of-bounds Read
|
CVE-2017-6363
|
2024-11-21 12:29 |
2020-02-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|