# CVEs published 2017-10-15

6 CVEs were published on October 15, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-15363](https://cve.now/CVE-2017-15363.md): Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler exten (no CVSS, aoe/restler · luracast/restler)
- [CVE-2017-15364](https://cve.now/CVE-2017-15364.md): The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or (no CVSS, ccsv)
- [CVE-2017-15360](https://cve.now/CVE-2017-15360.md): PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect erro (no CVSS)
- [CVE-2017-15300](https://cve.now/CVE-2017-15300.md): The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made ( (no CVSS)
- [CVE-2017-15304](https://cve.now/CVE-2017-15304.md): /bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an attacker to set his own session id via a "Cook (no CVSS)
- [CVE-2017-15305](https://cve.now/CVE-2017-15305.md): XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.