CVEs published October 21, 2017
12 CVEs were published on October 21, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 12
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 1
- Fix available
- 0
Most affected products
- Adobe Flash Player
- 1
- Cisco AMP for Endpoints
- 1
High 1
Medium, low and unrated 11
- CVE-2017-12317The Cisco AMP For Endpoints application allows an authenticated, local attacker to access a static key value stored in the local applicationCisco AMP for Endpoints
- CVE-2017-15727In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via an HTML attachment.
- CVE-2017-15728In phpMyFAQ before 2.9.9, there is Stored Cross-site Scripting (XSS) via metaDescription or metaKeywords.
- CVE-2017-15729In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for adding a glossary.
- CVE-2017-15730In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.ratings.php.
- CVE-2017-15731In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.adminlog.php.
- CVE-2017-15732In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/news.php.
- CVE-2017-15733In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/ajax.attachment.php and admin/att.main.php.
- CVE-2017-15734In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) in admin/stat.main.php.
- CVE-2017-15735In phpMyFAQ before 2.9.9, there is Cross-Site Request Forgery (CSRF) for modifying a glossary.
- CVE-2017-15736Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a