https://vulnogram.org/ Most recent CVEs assigned by joshbressers (joshbressers). https://vulnogram.org/seaview/icons/joshbressers.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2017-1001004 https://vulnogram.org/CVE-2017-1001004 typed-function before 0.10.6 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution. Mon, 27 Nov 2017 14:00:00 GMT https://vulnogram.org/CVE-2017-1001003 https://vulnogram.org/CVE-2017-1001003 math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object. Mon, 27 Nov 2017 14:00:00 GMT https://vulnogram.org/CVE-2017-1001002 https://vulnogram.org/CVE-2017-1001002 math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution. Mon, 27 Nov 2017 14:00:00 GMT https://vulnogram.org/CVE-2017-1001001 https://vulnogram.org/CVE-2017-1001001 PluXml version 5.6 is vulnerable to stored cross-site scripting vulnerability, within the article creation page, which can result in escalation of privileges. Wed, 01 Nov 2017 17:00:00 GMT https://vulnogram.org/CVE-2017-1001000 https://vulnogram.org/CVE-2017-1001000 The register_routes function in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in the REST API in WordPress 4.7.x before 4.7.2 does not require an integer identifier, which allows remote attackers to modify arbitrary pages via a re… Mon, 03 Apr 2017 01:00:00 GMT