SEC Consult Aruba AirWave 8.2.3 - XML External Entity Injection / Cross-Site Scripting
webapps xml CVE-2016-8527;CVE-2016-8526;ARUBA-PSA-2017-001

B GOVIND D-Link DSL-2730U Wireless N 150 - Cross-Site Request Forgery
webapps hardware CVE-2017-6411

SlidingWindow Sophos Web Appliance 4.3.1.1 - Session Fixation
webapps php CVE-2017-6412

SivertPL Netgear DGN2200v1/v2/v3/v4 - Cross-Site Request Forgery
webapps hardware CVE-2017-6334;CVE-2017-6366

Ihsan Sencan Joomla! Component OneVote! 1.0 - SQL Injection
webapps php

Ihsan Sencan Joomla! Component JomSocial - SQL Injection
webapps php

Ihsan Sencan Joomla! Component Spinner 360 1.3.0 - SQL Injection
webapps php

Ihsan Sencan Joomla! Component My MSG 3.2.1 - SQL Injection
webapps php

Ihsan Sencan Joomla! Component Appointments for JomSocial 3.8.1 - SQL Injection
webapps php

Ihsan Sencan Joomla! Component Gnosis 1.1.2 - 'id' SQL Injection
webapps php

SivertPL Netgear DGN2200v1/v2/v3/v4 - 'dnslookup.cgi' Remote Command Execution
webapps hardware CVE-2017-6334

Ihsan Sencan Joomla! Component Intranet Attendance Track 2.6.5 - SQL Injection
webapps php

HaHwul memcache-viewer - Cross-Site Scripting
webapps php

Google Security Research Apple WebKit 10.0.2 - 'Frame::setDocument' Universal Cross-Site Scripting
webapps multiple CVE-2017-2365;HT207485;HT207484;HT207482

Ihsan Sencan Joomla! Component Community Quiz 4.3.5 - SQL Injection
webapps php

Google Security Research Apple WebKit 10.0.2 - Cross-Origin or Sandboxed IFRAME Pop-up Blocker Bypass
webapps multiple CVE-2017-2371;HT207482