Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-04-02 CVE-2016-7585 Cryptographic Issues vulnerability in Apple mac OS X
An issue was discovered in certain Apple products.
low complexity
apple CWE-310
6.8
2017-04-01 CVE-2017-7395 Integer Overflow or Wraparound vulnerability in Tigervnc 1.7.1
In TigerVNC 1.7.1 (SMsgReader.cxx SMsgReader::readClientCutText), by causing an integer overflow, an authenticated client can crash the server.
network
low complexity
tigervnc CWE-190
6.5
2017-04-01 CVE-2017-7391 Cross-site Scripting vulnerability in Magmi Project Magmi 0.7.22
A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'.
network
low complexity
magmi-project CWE-79
6.1
2017-04-01 CVE-2017-7390 Cross-site Scripting vulnerability in Socialnetwork Project Socialnetwork 1.2.1
A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'.
network
low complexity
socialnetwork-project CWE-79
6.1
2017-04-01 CVE-2017-7389 Cross-site Scripting vulnerability in Openeclass
Multiple Cross-Site Scripting (XSS) were discovered in 'openeclass Release_3.5.4'.
network
low complexity
openeclass CWE-79
6.1
2017-04-01 CVE-2017-7388 Cross-site Scripting vulnerability in Wallaceit Wallacepos
A Cross-Site Scripting (XSS) was discovered in 'wallacepos v1.4.1'.
network
low complexity
wallaceit CWE-79
6.1
2017-04-01 CVE-2017-7387 Cross-site Scripting vulnerability in Helpmewatchwho Project Helpmewatchwho 20170323
TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter).
network
low complexity
helpmewatchwho-project CWE-79
6.1
2017-04-01 CVE-2017-7386 Cross-site Scripting vulnerability in Symetrie Project Symetrie 0.9.6
citymont/symetrie v.0.9.6 is vulnerable to a reflected XSS in symetrie-master/app/commands/page.php (model parameter).
network
low complexity
symetrie-project CWE-79
6.1
2017-03-31 CVE-2017-1171 Unspecified vulnerability in IBM Tririga Application Platform
The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to.
network
low complexity
ibm
4.3
2017-03-31 CVE-2017-1154 Information Exposure vulnerability in IBM Algo ONE 4.9.1/5.0.0/5.1.0
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users.
network
low complexity
ibm CWE-200
6.5