CVEs published May 28, 2017
10 CVEs were published on May 28, 2017: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- github.com/juju/juju
- 1
Medium, low and unrated 10
- CVE-2017-9249Cross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to inject arbitrary web script or HTML persiste
- CVE-2017-9250The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty stri
- CVE-2017-9251andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php.
- CVE-2017-9252andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route
- CVE-2017-9243Aries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless Site Survey page, exploitable with the name of
- CVE-2015-9059picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line is executed by /bin
- CVE-2016-10376Gajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients" extension.
- CVE-2017-7295An issue was discovered in Contiki Operating System 3.0.
- CVE-2017-7296An issue was discovered in Contiki Operating System 3.0.
- CVE-2017-9232Juju before 1.25.12, 2.0.x before 2.0.4, and 2.1.x before 2.1.3 uses a UNIX domain socket without setting appropriate permissions, allowing github.com/juju/juju