CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- splunk hadoop connectSplunk Hadoop Connect App has a path traversal vulnerability that allows remote authenticated...8.8 High
- spiceworksThe Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers...9.8 Critical
- obdev little snitchLittle Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in...7.8 High
- arm trusted firmware project trusted firmwareIn ARM Trusted Firmware 1.2 and 1.3, a malformed firmware update SMC can result in copying...5.9 Medium
- starscream project starscreamWebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect...7.5 High
- gmv checker atm securityGMV Checker ATM Security prior to 5.0.18 allows remote authenticated users to execute arbitrary...8.8 High
- f5 ssl intercept iapp, ssl orchestrator, f5 networks ssl intercept iapp 1.5.0 - 1.5.7 and ssl orchestrator 2.0 +2 moreF5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side...7.4 High
- starscream project starscreamWebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in...7.5 High
- f5 ssl intercept iapp, f5 networks ssl intercept iapp version +1 moreF5 SSL Intercept iApp version 1.5.0 - 1.5.7 is vulnerable to an unauthenticated, remote attack...9.8 Critical
- entropymine imageworsenerThe iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0...5.5 Medium
- entropymine imageworsenerThe iwgif_record_pixel function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0...5.5 Medium
- entropymine imageworsenerThe iwbmp_read_info_header function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0...5.5 Medium
- airtame hdmi dongle firmwareAIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the...9.8 Critical
- dropbox leptonThe allocate_channel_framebuffer function in uncompressed_components.hh in Dropbox Lepton 1.2.1...5.5 Medium
- helpdezkHelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP...8.8 High
- helpdezkHelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.8.8 High
- xmlsoft libxsltIn libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random...5.3 Medium
- veritas system recoveryIn Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch...7.8 High
- hackerone nextcloud server, nextcloud, nextcloud server +2 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the ...4.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to...4.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an...6.5 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of...4.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders...4.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via...6.4 Medium
- ibm tririga application platformThe IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user...5.3 Medium
- ibm disposal and governance management for it, global retention policy and schedule management, ibm corporation atlas policy suite +2 moreIBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule...8.8 High
- ibm cognos analyticsIBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- trendmicro interscan web security virtual applianceTrend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize...5.4 Medium
- trendmicro interscan web security virtual applianceTrend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages...6.5 Medium
- trendmicro interscan web security virtual applianceMultiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6...6.5 Medium
- bluecoat advanced secure gateway, content analysis system software, symantec corporation blue coat asg +1 more +3 moreBlue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3...7.2 High
- apple iphone osWi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow...6.8 Medium
- broadcom hardmac wi-fi soc firmwareOn the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling...8.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn information disclosure vulnerability in the NVIDIA crypto driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA boot and power management processor driver...7.0 High
- google android, linux kernel +1 moreAn information disclosure vulnerability in the NVIDIA crypto driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local...7.0 High
- jasper, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreJasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded...6.5 Medium
- jasper project jasper, oracle outside in technology, redhat enterprise linux desktop +5 more +7 moreAn out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper...5.5 Medium
- linux kernelThe ping_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in...5.5 Medium
- lightdm project lightdm, canonical ubuntu linux +1 moreIn LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local...7.3 High
- apache geodeApache Geode information disclosure vulnerability7.5 High
- linux kernelThe msm_ipc_router_close function in net/ipc_router/ipc_router_socket.c in the ipc_router...7.8 High
- foxitsoftware foxit readerHeap-based buffer overflow in the CreateFXPDFConvertor function in ConvertToPdf_x86.dll in Foxit...7.8 High
- proftpdProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user...5.5 Medium
- opendaylight openflowOpenFlow plugin for OpenDaylight LLDP Relay7.5 High
- Show moreLoading…