Security Vulnerabilities - CVEs Published In August 2017
Hard coded weak credentials in Barracuda Load Balancer 5.0.0.015.
CVSS Score
9.8
EPSS Score
0.022
Published
2017-08-28
Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key.
CVSS Score
9.8
EPSS Score
0.024
Published
2017-08-28
Multiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.
CVSS Score
6.1
EPSS Score
0.015
Published
2017-08-28
Directory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3 and earlier, 5.0.4.4 and earlier, 5.1.0.1 and earlier, 5.1.1.2 and earlier, 5.2.0.3 and earlier, and 5.3.0.1 and earlier.
CVSS Score
7.5
EPSS Score
0.041
Published
2017-08-28
Cross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1.0.7 and earlier, and 6.1.1.1 and earlier.
CVSS Score
8.8
EPSS Score
0.006
Published
2017-08-28
Unrestricted File Upload vulnerability in Photo Gallery 1.2.5.
CVSS Score
8.8
EPSS Score
0.454
Published
2017-08-28
Cross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5, and 5.1.3.
CVSS Score
6.1
EPSS Score
0.014
Published
2017-08-28
Emacs 24.4 allows remote attackers to bypass security restrictions.
CVSS Score
7.5
EPSS Score
0.028
Published
2017-08-28
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.037
Published
2017-08-28
Cross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.
CVSS Score
6.1
EPSS Score
0.008
Published
2017-08-28