Exploit Intelligence Platform

CVE-2017-6748 6.7 MEDIUM EPSS 0.00

A vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The attacker must authenticate with valid operator-level or administrator-level credentials. Affected Products: virtual and hardware versions of Cisco Web Security Appliance (WSA). More Information: CSCvd88855. Known Affected Releases: 10.1.0-204. Known Fixed Releases: 10.5.1-270 10.1.1-234.

CWE-74 Jul 25, 2017

CVE-2017-8919 6.5 MEDIUM EPSS 0.00

NetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to log in using the REST API, which allows remote authenticated users to obtain sensitive password information via unspecified vectors.

Jul 25, 2017

CVE-2017-11460 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver Portal 7.4 allows remote attackers to inject arbitrary web script or HTML via the responsecode parameter to shp/shp_result.jsp, aka SAP Security Note 2308535.

CWE-79 Jul 25, 2017

CVE-2017-11458 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783.

CWE-79 Jul 25, 2017

CVE-2017-11457 6.5 MEDIUM EPSS 0.01

XML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request, aka SAP Security Note 2387249.

CWE-611 Jul 25, 2017

CVE-2017-11434 5.5 MEDIUM EPSS 0.00

The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.

CWE-125 Jul 25, 2017

CVE-2015-5594 6.1 MEDIUM 1 PoC Analysis EPSS 0.00

The sanitize_string function in ZenPhoto before 1.4.9 utilized the html_entity_decode function after input sanitation, which might allow remote attackers to perform a cross-site scripting (XSS) via a crafted string.

CWE-79 Jul 25, 2017

CVE-2015-5221 5.5 MEDIUM 1 Writeup EPSS 0.00

Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.

CWE-416 Jul 25, 2017

CVE-2015-5187 6.5 MEDIUM EPSS 0.00

Candlepin allows remote attackers to obtain sensitive information by obtaining Java exception statements as a result of excessive web traffic.

CWE-399 Jul 25, 2017

CVE-2015-4463 6.5 MEDIUM EPSS 0.00

The file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to bypass intended file-upload restrictions by appending a crafted parameter to the file URL.

CWE-434 Jul 25, 2017

CVE-2015-4462 6.5 MEDIUM EPSS 0.00

Absolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5 allows remote authenticated users to read arbitrary files via a full pathname in the "Upload file from url" field in the file manager for professor.php.

CWE-434 Jul 25, 2017

CVE-2015-3243 5.5 MEDIUM EPSS 0.00

rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.

CWE-532 Jul 25, 2017

CVE-2015-3171 5.5 MEDIUM 1 Writeup EPSS 0.00

sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.

CWE-200 Jul 25, 2017

CVE-2015-3149 5.5 MEDIUM EPSS 0.00

The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack.

CWE-59 Jul 25, 2017

CVE-2015-0904 5.9 MEDIUM EPSS 0.00

The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates, which allows remote attackers to obtain sensitive information via a man-in-the-middle attack.

CWE-295 Jul 25, 2017

CVE-2015-0674 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base revision allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

CWE-79 Jul 25, 2017

CVE-2017-11617 6.1 MEDIUM EPSS 0.00

Cross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote attackers to inject arbitrary web script or HTML within the body of an email via an IMG element with both single quotes and double quotes.

CWE-79 Jul 25, 2017

CVE-2017-9457 6.7 MEDIUM EPSS 0.00

Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS.

CWE-20 Jul 25, 2017

CVE-2017-1380 5.4 MEDIUM EPSS 0.00

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 127151.

CWE-79 Jul 24, 2017

CVE-2017-1287 5.4 MEDIUM EPSS 0.00

IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.

CWE-601 Jul 24, 2017