Security Vulnerabilities - CVEs Published In August 2017
Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.
CVSS Score
9.8
EPSS Score
0.008
Published
2017-08-28
Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.
CVSS Score
9.8
EPSS Score
0.009
Published
2017-08-28
Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.
CVSS Score
6.1
EPSS Score
0.003
Published
2017-08-28
Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier, 5.2.0.3 and earlier, and 5.3.0.1 and earlier.
CVSS Score
7.5
EPSS Score
0.023
Published
2017-08-28
Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier.
CVSS Score
8.8
EPSS Score
0.002
Published
2017-08-28
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
CVSS Score
8.8
EPSS Score
0.765
Published
2017-08-28
Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-08-28
Emacs 24.4 allows remote attackers to bypass security restrictions.
CVSS Score
7.5
EPSS Score
0.002
Published
2017-08-28
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.065
Published
2017-08-28
Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-08-28