CVEs published August 21, 2017
18 CVEs were published on August 21, 2017: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Micro Focus Enterprise Developer, Micro Focus Enterprise Se…
- 6
- Cloud Foundry
- 1
- codiad/codiad
- 1
- Symantec VIP Access for Desktop
- 1
Medium, low and unrated 18
- CVE-2017-8037In Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf-release versions after v244 and prior to v270, thCloud Foundry
- CVE-2017-6329Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability.Symantec VIP Access for Desktop
- CVE-2017-5187A Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server Administration web UI) in Micro Focus EnterpMicro Focus Enterprise Developer, Micro Focus Enterprise Se…
- CVE-2017-7420An Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and Control) in Micro Focus Enterprise Developer anMicro Focus Enterprise Developer, Micro Focus Enterprise Se…
- CVE-2017-7421Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka Enterprise Server Administration web UI) anMicro Focus Enterprise Developer, Micro Focus Enterprise Se…
- CVE-2017-7422Reflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro Focus Enterprise Developer and Enterprise SeMicro Focus Enterprise Developer, Micro Focus Enterprise Se…
- CVE-2017-7423A Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 UpdatMicro Focus Enterprise Developer, Micro Focus Enterprise Se…
- CVE-2017-7424A Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and Enterprise Server 2.3, 2.3 Update 1 before HoMicro Focus Enterprise Developer, Micro Focus Enterprise Se…
- CVE-2017-12784In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash th
- CVE-2017-12978lib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an authenticated user.
- CVE-2017-12979DokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code element, in /inc/parser/xhtml.php.
- CVE-2017-12980DokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc/parser/xhtml.php.
- CVE-2017-12981NexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an addforum action.
- CVE-2017-12982The bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows rem
- CVE-2017-12983Heap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8 allows remote attackers to cause a denial of
- CVE-2017-12984PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/message_update.php.
- CVE-2017-11366components/filemanager/class.filemanager.php in Codiad before 2.8.4 is vulnerable to remote command execution because shell commands can be codiad/codiad
- CVE-2017-12977The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related