PatchTheCVEnews vulnerabilities and fixes
Recent CVEs affecting news, with upgrade or downgrade steps. 5 tracked.
news has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2021-11-30. Highest priority: CVE-2017-15982 (score 66/100).
- CVE-2021-41256 MEDIUM 5.8 UPGRADE nextcloud news-android is an Android client for the Nextcloud news/feed reader app
- CVE-2019-12724 MEDIUM 6.1 UPGRADE An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI
- CVE-2017-15982 CRITICAL 9.8 DOWNGRADE Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for
- CVE-2014-6290 HIGH 7.5 UPGRADE The News (tt_news) extension before 3.5.2 for TYPO3 allows remote attackers to have unspecified impact via vec
- CVE-2013-4748 HIGH 7.5 UPGRADE SQL injection vulnerability in the News system (news) extension before 1.3.3 for TYPO3 allows remote attackers
FAQ
How do I fix news vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is news being exploited right now?
None of the tracked news CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which news CVE should I patch first?
CVE-2017-15982 currently ranks highest (66/100): Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for .