CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- apache igniteModerate severity vulnerability that affects org.apache.ignite:ignite-core5.9 Medium
- cisco ios xeA vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated...6.4 Medium
- cisco integrated management controller, unified computing system +1 moreA vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software...6.1 Medium
- cisco asr 900 series firmwareA vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow...6.5 Medium
- cisco unified computing system, firepower extensible operating system +1 moreA vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100...4.4 Medium
- cisco unified computing system, firepower extensible operating system +1 moreA vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower...7.1 High
- cisco unified computing system, firepower extensible operating system +1 moreA vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower...7.8 High
- cisco ios xr software, ios xr +1 moreA vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software...5.3 Medium
- cisco unified computing system, firepower extensible operating system +1 moreA vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS)...6.7 Medium
- cisco unified computing system, firepower extensible operating system +1 moreA vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager...7.8 High
- cisco registered envelope serviceA vulnerability in the web interface of the Cisco Registered Envelope Service could allow an...6.1 Medium
- cisco unified communications managerA vulnerability in the web-based management interface of Cisco Unified Communications Manager...5.4 Medium
- cisco secure firewall threat defenseA vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco...5.9 Medium
- cisco unified communications managerA vulnerability in the Cisco Unified Communications Manager web interface could allow an...4.9 Medium
- cisco secure firewall management centerA vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for...5.9 Medium
- cisco prime infrastructure, evolved programmable network manager +1 moreA vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable...6.5 Medium
- cisco prime infrastructureA vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could...6.1 Medium
- cisco ucs director, unified computing system director +1 moreA vulnerability in the role-based resource checking functionality of Cisco Unified Computing...4.3 Medium
- cisco mobility services engineA vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series...6.7 Medium
- cisco aironet access pointA vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series...6.7 Medium
- cisco wireless lan controllerA vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless...5.3 Medium
- phpmyfaqinc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field.6.1 Medium
- apple musicThe Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify...4.8 Medium
- libmingMultiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause...7.8 High
- xiongmaitech uc-httpdXiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../"...9.8 Critical
- pivotxPivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by...8.8 High
libdatetime-timezone-perlDebianlibdatetime-timezone-perl - new upstream versionNo scoretzdataDebiantzdata - new upstream versionNo score- libsndfile project libsndfileIn libsndfile before 1.0.28, an error in the "header_read()" function (common.c) when handling...5.5 Medium
- libsndfile project libsndfileIn libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be...5.5 Medium
- google androidAn elevation of privilege vulnerability in libnl could enable a local malicious application to...7.0 High
- clip-bucket clipbucketMultiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow...6.1 Medium
- clip-bucket clipbucketMultiple cross-site scripting (XSS) vulnerabilities in ClipBucket 2.7.0.5 allow remote...5.4 Medium
- dragonwavex horizon wireless radio firmwareDragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username...9.8 Critical
- schneider-electric modicon tm221ce16r firmwareSchneider Electric Modicon TM221CE16R 1.3.3.3 devices allow remote attackers to discover the...9.8 Critical
- schneider-electric somachine, modicon tm221ce16r firmware +1 moreSchneider Electric SoMachine Basic 1.4 SP1 and Schneider Electric Modicon TM221CE16R 1.3.3.3...9.8 Critical
- apache tika, nutch +1 moreApache Tika allows Java code execution for serialized objects embedded in MATLAB files9.8 Critical
- perforce jviews, oracle data integrator +1 moreRogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute...9.8 Critical
- cloudfoundry bosh azure cpiCloud Foundry Foundation BOSH Azure CPI v22 could potentially allow a maliciously crafted...8.8 High
- google android, qualcomm, inc. qualcomm snapdragon 800, 600, 400, 200 +1 moreThe high level operating systems (HLOS) was not providing sufficient memory address information...5.5 Medium
- backintime project backintimeThe _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18...8.1 High
- cisco aironet access point firmwareA vulnerability in Cisco Aironet 1830 Series and Cisco Aironet 1850 Series Access Points running...9.8 Critical
- cisco wireless lan controller firmwareA vulnerability in the web management interface of Cisco Wireless LAN Controller (WLC) Software...7.5 High
- cisco wireless lan controller firmware, wireless lan controller software +1 moreA vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC)...7.5 High
- cisco wireless lan controller, wireless lan controller 6.0, wireless lan controller 7.0 +3 more +5 moreA vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco...6.5 Medium
- textract project textracttextract before 1.5.0 allows OS Command Injection attacks via a filename in a call to the process...7.8 High
- ladybirdweb faveo helpdeskpublic/rolechangeadmin in Faveo 1.9.3 allows CSRF. The impact is obtaining admin privileges.8.0 High
- vbulletinIn vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF...8.6 High
- zyxel emg2926 routers, emg2926 firmware +1 moreA command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware...8.8 High
- mybbMyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism.7.7 High
- Show moreLoading…