Security Vulnerabilities - CVEs Published In September 2017
SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.
CVSS Score
8.1
EPSS Score
0.088
Published
2017-09-07
strongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.048
Published
2017-09-07
Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1.
CVSS Score
7.5
EPSS Score
0.004
Published
2017-09-07
Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.
CVSS Score
8.8
EPSS Score
0.002
Published
2017-09-07
SQL injection vulnerability in Pragyan CMS 3.0.
CVSS Score
9.8
EPSS Score
0.003
Published
2017-09-07
Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions.
CVSS Score
9.8
EPSS Score
0.021
Published
2017-09-07
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
CVSS Score
8.8
EPSS Score
0.002
Published
2017-09-07
Multiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-09-07
SQL injection vulnerability in Concrete5 5.7.3.1.
CVSS Score
8.8
EPSS Score
0.002
Published
2017-09-07
SQL injection vulnerability in Sefrengo before 1.6.5 beta2.
CVSS Score
9.8
EPSS Score
0.003
Published
2017-09-07