CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- opendaylight openflowOpenFlow plugin for OpenDaylight allows spoofing the SDN topology7.5 High
- riverbed riosRiverbed RiOS before 9.0.1 does not properly restrict shell access in single-user mode, which...6.8 Medium
- riverbed rios** DISPUTED ** Riverbed RiOS through 9.6.0 has a weak default password for the secure vault,...6.4 Medium
- riverbed rios** DISPUTED ** Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it...4.6 Medium
- riverbed riosRiverbed RiOS through 9.6.0 deletes the secure vault with the rm program (not shred or srm),...4.6 Medium
- linux kernelA missing authorization check in the fscrypt_process_policy function in fs/crypto/policy.c in the...6.5 Medium
- horde groupwareIn Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS...7.5 High
- horde groupwareIn Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS...8.8 High
- d-link dir-615 firmwareD-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery (CSRF) vulnerability....8.8 High
- djangoproject djangoDjango open redirect6.1 Medium
- djangoproject djangoDjango open redirect and possible XSS attack via user-supplied numeric redirect URLs6.1 Medium
- xenAn issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x,...8.2 High
- intel hardware accelerated execution managerPrivilege escalation in IntelHAXM.sys driver in the Intel Hardware Accelerated Execution Manager...7.8 High
- go ssh library, golang crypto +1 moregolang.org/x/crypto/ssh Man-in-the-Middle attack8.1 High
geotiffSUSERecommended update for geotiffNo scoregeotiffSUSERecommended update for geotiffNo score- linux kernel, google android +1 moreudp.c in the Linux kernel before 4.5 allows remote attackers to execute arbitrary code via UDP...9.8 Critical
- linux kernel, google android +1 moreThe eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via...7.8 High
- nixosNixOS 17.03 before 17.03.887 has a world-writable Docker socket, which allows local users to gain...7.8 High
- trytonTryton Information Disclosure Vulnerability5.3 Medium
- websitebakerMultiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in...9.8 Critical
- intel nuc nuc6i5sysh/k, intel nuc6i3sysh/k, nuc6i3syh bios, nuc6i3syk bios +2 moreThe BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may...3.9 Low
- intel nuc nuc6i7kyk, nuc6i7kyk bios +1 moreThe BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may...3.9 Low
- intel compute stick stk2mv64cc, stk2mv64cc bios +1 moreThe BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version...3.9 Low
phpmyadminMageiaUpdated phpmyadmin packages fix security vulnerabilityNo score- backbox linux** DISPUTED ** BackBox Linux 4.6 allows remote attackers to cause a denial of service (ksoftirqd...7.5 High
- lucidcrew pixiePixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the...9.8 Critical
- apache ambariDuring installation of Ambari 2.4.0 through 2.4.2, Ambari Server artifacts are not created with...9.8 Critical
- lg project lglg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access...7.5 High
- lg project lgThe default configuration for Cougar-LG stores sensitive information under the web root with...7.5 High
- lg project lgCougar-LG stores sensitive information under the web root with insufficient access control, which...9.8 Critical
- mrlg4php project mrlg4phpmrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code.9.8 Critical
- technicolor tc7200 firmwareTechnicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive...7.5 High
- pulpproject pulpPulp before 2.3.0 uses the same the same certificate authority key and certificate for all...7.5 High
- collectdIncorrect interaction of the parse_packet() and parse_part_sign_sha256() functions in network.c...7.5 High
- openstack horizonOpenStack Horizon Cross-site Scripting (XSS)4.8 Medium
- podofo project podofoThe PdfFontFactory.cpp:195:62 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of...5.5 Medium
- podofo project podofoThe PdfFontFactory.cpp:200:88 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of...5.5 Medium
- podofo project podofoThe doc/PdfPage.cpp:609:23 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of...5.5 Medium
- podofo project podofoThe doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of...5.5 Medium
- podofo project podofoThe PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5...5.5 Medium
- podofo project podofoThe PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote...5.5 Medium
- radare radare2The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote...7.8 High
- php** DISPUTED ** The _zval_get_long_func_ex in Zend/zend_operators.c in PHP 7.1.2 allows attackers...7.5 High
- radare radare2The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a...7.8 High
- ruby-lang rubyThe parse_char_class function in regparse.c in the Onigmo (aka Oniguruma-mod) regular expression...7.5 High
- yaml-cpp project yaml-cppThe SingleDocParser::HandleNode function in yaml-cpp (aka LibYaml-C++) 0.5.3 allows remote...5.5 Medium
- apple safariJavaScriptCore in WebKit, as distributed in Safari Technology Preview Release 22, allows remote...9.8 Critical
- virustotal yaralibyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (use-after...7.5 High
- virustotal yaralibyara/grammar.y in YARA 3.5.0 allows remote attackers to cause a denial of service (heap-based...7.5 High
- Show moreLoading…