CVE-2017-18000 to CVE-2017-18999

116 CVEs with public proof-of-concept exploits.

• CVE-2017-180011 PoCTrustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH…
• CVE-2017-180081 PoCIn ImageMagick 7.0.7-17 Q16, there is a Memory Leak in ReadPWPImage in coders/pwp.c.
• CVE-2017-180102 PoCsThe E-goi Smart Marketing SMS and Newsletters Forms plugin before 2.0.0 for WordPress has XSS via the…
• CVE-2017-180111 PoCThe MyCBGenie Affiliate Ads for Clickbank Products plugin through 1.6 for WordPress has XSS via the text_ads_ajax.php border_color…
• CVE-2017-180121 PoCThe Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter.
• CVE-2017-180151 PoCThe ILLID Share This Image plugin before 1.04 for WordPress has XSS via the sharer.php url parameter.
• CVE-2017-180163 PoCsParity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting…
• CVE-2017-180192 PoCsIn K7 Total Security before 15.1.0.305, user-controlled input to the K7Sentry device is not sufficiently sanitized: the user-controlled…
• CVE-2017-180211 PoCIt was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable…
• CVE-2017-180221 PoCIn ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
• CVE-2017-180231 PoCOffice Tracker 11.2.5 has XSS via the logincount parameter to the /otweb/OTPClientLogin URI.
• CVE-2017-180242 PoCsAvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT…
• CVE-2017-180251 PoCcgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters…
• CVE-2017-180321 PoCThe download-manager plugin before 2.9.52 for WordPress has XSS via the id parameter in a wpdm_generate_password action to…
• CVE-2017-180442 PoCsA Command Injection issue was discovered in ContentStore/Base/CVDataPipe.dll in Commvault before v11 SP6. A certain message parsing…
• CVE-2017-180474 PoCsBuffer Overflow in the FTP client in LabF nfsAxe 3.7 allows remote FTP servers to execute arbitrary code via a long reply.
• CVE-2017-180483 PoCsMonstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php…
• CVE-2017-180491 PoCIn the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain…
• CVE-2017-180771 PoCindex.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an…
• CVE-2017-180783 PoCssystemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the…
• CVE-2017-181231 PoCThe call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected…
• CVE-2017-181751 PoCProgress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demonstrated by the src…
• CVE-2017-181761 PoCProgress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the application's own…
• CVE-2017-181771 PoCProgress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is fixed in 10.1.
• CVE-2017-181781 PoCAuthenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the redirection target,…
• CVE-2017-181791 PoCProgress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a password change or a…
• CVE-2017-181891 PoCIn the startread function in xa.c in Sound eXchange (SoX) through 14.4.2, a corrupt header specifying zero channels triggers an infinite…
• CVE-2017-181951 PoCAn issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enumerate comments…
• CVE-2017-181991 PoCrealloc_symlink in rock.c in GNU libcdio before 1.0.0 allows remote attackers to cause a denial of service (NULL Pointer Dereference) via…
• CVE-2017-182141 PoCThe moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different…
• CVE-2017-182191 PoCAn issue was discovered in GraphicsMagick 1.3.26. An allocation failure vulnerability was found in the function ReadOnePNGImage in…
• CVE-2017-182201 PoCThe ReadOneJNGImage and ReadJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 allow remote attackers to cause a denial of…
• CVE-2017-182561 PoCBrave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long alert() argument in…
• CVE-2017-182631 PoCSeagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named…
• CVE-2017-182671 PoCThe FoFiType1C::cvtGlyph function in fofi/FoFiType1C.cc in Poppler through 0.64.0 allows remote attackers to cause a denial of service…
• CVE-2017-182861 PoCnZEDb v0.7.3.3 has XSS in the 404 error page.
• CVE-2017-183421 PoCIn PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data. The load() function has been…
• CVE-2017-183431 PoCThe debug handler in Symfony before v2.7.33, 2.8.x before v2.8.26, 3.x before v3.2.13, and 3.3.x before v3.3.6 has XSS via an array key…
• CVE-2017-183442 PoCsThe timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the…
• CVE-2017-183452 PoCsThe Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the…
• CVE-2017-183461 PoCSQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to…
• CVE-2017-183471 PoCIncorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attackers to extract the…
• CVE-2017-183481 PoCSplunk Enterprise 6.6.x, when configured to run as root but drop privileges to a specific non-root account, allows local users to gain…
• CVE-2017-183494 PoCsparseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute…
• CVE-2017-183521 PoCError reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.
• CVE-2017-183531 PoCRendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting…
• CVE-2017-183541 PoCRendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can…
• CVE-2017-183551 PoCInstalled packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by…
• CVE-2017-183572 PoCsShopware before 5.3.4 has a PHP Object Instantiation issue via the sort parameter to the loadPreviewAction() method of the…
• CVE-2017-183581 PoCLimeSurvey before 2.72.4 has Stored XSS by using the Continue Later (aka Resume later) feature to enter an email address, which is…
• CVE-2017-183611 PoCIn Pylons Colander through 1.6, the URL validator allows an attacker to potentially cause an infinite loop thereby causing a denial of…
• CVE-2017-183622 PoCsKEVConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct…
• CVE-2017-183641 PoCphpFK lite has XSS via the faq.php, members.php, or search.php query string or the user.php user parameter.
• CVE-2017-183651 PoCThe Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to…
• CVE-2017-183684 PoCsKEVThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability…
• CVE-2017-183694 PoCsThe Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log…
• CVE-2017-183704 PoCsThe ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has a command injection vulnerability in the Remote System…
• CVE-2017-183714 PoCsThe ZyXEL P660HN-T1A v2 TCLinux Fw #7.3.37.6 router distributed by TrueOnline has three user accounts with default passwords, including…
• CVE-2017-183724 PoCsThe Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has a command injection vulnerability in the Time…
• CVE-2017-183733 PoCsThe Billion 5200W-T TCLinux Fw $7.3.8.0 v008 130603 router distributed by TrueOnline has three user accounts with default passwords,…
• CVE-2017-183743 PoCsThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has two user accounts with default…
• CVE-2017-183771 PoCAn issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell…
• CVE-2017-183781 PoCIn NETGEAR ReadyNAS Surveillance before 1.4.3-17 x86 and before 1.1.4-7 ARM, $_GET['uploaddir'] is not escaped and is passed to system()…
• CVE-2017-184831 PoCANNKE SP1 HD wireless camera 3.4.1.1604071109 devices allow XSS via a crafted SSID.
• CVE-2017-184861 PoCJitbit Helpdesk before 9.0.3 allows remote attackers to escalate privileges because of mishandling of the User/AutoLogin userHash…
• CVE-2017-184871 PoCThe adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.
• CVE-2017-184901 PoCThe contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
• CVE-2017-184911 PoCThe contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
• CVE-2017-184921 PoCThe contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
• CVE-2017-184931 PoCThe custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
• CVE-2017-184941 PoCThe custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
• CVE-2017-184961 PoCThe htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
• CVE-2017-185001 PoCThe social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
• CVE-2017-185011 PoCThe social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
• CVE-2017-185021 PoCThe subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
• CVE-2017-185051 PoCThe twitter-plugin plugin before 2.55 for WordPress has XSS.
• CVE-2017-185091 PoCAn issue was discovered in net/ipv6/ip6mr.c in the Linux kernel before 4.11. By setting a specific socket option, an attacker can control…
• CVE-2017-185161 PoCThe bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
• CVE-2017-185171 PoCThe bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
• CVE-2017-185181 PoCThe bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
• CVE-2017-185211 PoCThe democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.
• CVE-2017-185271 PoCThe pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
• CVE-2017-185281 PoCThe pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
• CVE-2017-185291 PoCThe promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
• CVE-2017-185301 PoCThe rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
• CVE-2017-185321 PoCThe realty plugin before 1.1.0 for WordPress has multiple XSS issues.
• CVE-2017-185361 PoCThe stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
• CVE-2017-185371 PoCThe visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
• CVE-2017-185421 PoCThe zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.
• CVE-2017-185561 PoCThe bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
• CVE-2017-185571 PoCThe bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
• CVE-2017-185581 PoCThe bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
• CVE-2017-185621 PoCThe error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.
• CVE-2017-185641 PoCThe sender plugin before 1.2.1 for WordPress has multiple XSS issues.
• CVE-2017-185651 PoCThe updater plugin before 1.35 for WordPress has multiple XSS issues.
• CVE-2017-185661 PoCThe user-role plugin before 1.5.6 for WordPress has multiple XSS issues.
• CVE-2017-185801 PoCThe shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.
• CVE-2017-185851 PoCThe posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal.
• CVE-2017-185901 PoCThe timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.
• CVE-2017-185972 PoCsThe jtrt-responsive-tables plugin before 4.1.2 for WordPress has SQL Injection via the admin/class-jtrt-responsive-tables-admin.php…
• CVE-2017-185982 PoCsThe Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.
• CVE-2017-186011 PoCThe examapp plugin 1.0 for WordPress has XSS via exam input text fields.
• CVE-2017-186021 PoCThe examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examapp_UserResult id parameter.
• CVE-2017-186031 PoCThe postman-smtp plugin through 2017-10-04 for WordPress has XSS via the wp-admin/tools.php?page=postman_email_log page parameter.
• CVE-2017-186041 PoCThe sitebuilder-dynamic-components plugin through 1.0 for WordPress has PHP object injection via an AJAX request.
• CVE-2017-186091 PoCThe magic-fields plugin before 1.7.2 for WordPress has XSS via the custom-write-panel-id parameter.
• CVE-2017-186101 PoCThe magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.
• CVE-2017-186111 PoCThe magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-field-css parameter.
• CVE-2017-186121 PoCThe wp-whois-domain plugin 1.0.0 for WordPress has XSS via the pages/func-whois.php domain parameter.
• CVE-2017-186131 PoCThe trust-form plugin 2.0 for WordPress has XSS via the wp-admin/admin.php?page=trust-form-edit page parameter.
• CVE-2017-186141 PoCThe kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.
• CVE-2017-186353 PoCsAn XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web…
• CVE-2017-186383 PoCssend_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint…
• CVE-2017-186391 PoCProgress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List…
• CVE-2017-186401 PoCThe Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.
• CVE-2017-189261 PoCraptor_xml_writer_start_element_common in raptor_xml_writer.c in Raptor RDF Syntax Library 2.0.15 miscalculates the maximum nspace…