CVE

CVE-2016-6798 In the XSS Protection API module before 1.0.12 in Apache Sling, the method XSS.getValidXML() uses ... http://bit.ly/2tfen7f 

CVE-2016-5394 In the XSS Protection API module before 1.0.12 in Apache Sling, the encoding done by the ... http://bit.ly/2uD03sK 

CVE-2016-7509 Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to ... http://bit.ly/2uC9NmP 

CVE-2016-7507 Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated ... http://bit.ly/2tGqadV 

CVE-2017-9764 Cross-site scripting (XSS) vulnerability in MetInfo 5.3.17 allows remote attackers to inject ... http://bit.ly/2tG69EA 

CVE-2017-9245 The Google News and Weather application before 3.3.1 for Android allows remote attackers to read ... http://bit.ly/2uC0pje 

CVE-2017-11456 Geneko GWR routers allow directory traversal sequences starting with a /../ substring, as ... http://bit.ly/2teHtTZ 

CVE-2017-11450 coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service ... http://bit.ly/2teOWCG 

CVE-2017-11449 coders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot ... http://bit.ly/2tFFCqT 

CVE-2017-11448 The ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote ... http://bit.ly/2tG6J5f 

CVE-2017-11447 The ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory ... http://bit.ly/2tFLPTD 

CVE-2017-11446 The ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop ... http://bit.ly/2tfaRti 

CVE-2017-11445 Subrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST ... http://bit.ly/2uCdadG 

CVE-2017-11444 Subrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET ... http://bit.ly/2uC3r78 

CVE-2017-11441 The WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before ... http://bit.ly/2tGiiJk 

CVE-2017-11440 In Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi ... http://bit.ly/2teYu0p 

CVE-2017-11439 In Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter. http://bit.ly/2tfhfRo 

CVE-2017-11436 D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which ... http://bit.ly/2uC8jsZ 

CVE-2017-11435 The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability ... http://bit.ly/2uBOhP5 

CVE-2017-10801 phpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI. http://bit.ly/2tGa9ot