2017

In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.

In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event.

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a ne

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.

There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settin

There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and chang

e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A mal

XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.

An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitra

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request met

Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leve

Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cau

Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbou

SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary S

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the a

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and

D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root accou

Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remot

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptio

StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the

Java out of memory error and significant increase in resource consumption. Component: OpenDaylight odl-mdsal-xsql is vul

Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Component: OpenDa

Denial of Service attack when the switch rejects to receive packets from the controller. Component: This vulnerability a

On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0

An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Serv

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a m

A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an

A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pa

A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack

On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing h

Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which

On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to t

In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php.

XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.

D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access