CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- ibaby m3s baby monitor firmwareiBaby M3S has a password of admin for the backdoor admin account.9.8 Critical
- ibaby m6 baby monitor firmwareiBaby M6 allows remote attackers to obtain sensitive information, related to the ibabycloud.com...7.5 High
- lens laboratories peek-a-view firmwareLens Peek-a-View has a password of 2601hx for the backdoor admin account, a password of user for...9.8 Critical
- philips in.sight b120\\37Philips In.Sight B120/37 allows remote attackers to obtain sensitive information via a direct...7.5 High
- philips in.sight b120\\37Philips In.Sight B120/37 has XSS, related to the Weaved cloud web service, as demonstrated by the...5.4 Medium
- philips in.sight b120\\37Philips In.Sight B120/37 has a password of b120root for the backdoor root account, a password of ...9.8 Critical
- gynoii gcw-1010, gcw-1020, gpw-1025 +2 moreGynoii has a password of guest for the backdoor guest account and a password of 12345 for the...9.8 Critical
- trendnet tv-ip743sicTRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin for the backdoor root account.8.8 High
- visioncritical vision criticalVision Critical before 2014-05-30 allows attackers to read arbitrary files via unspecified...7.5 High
dovecotDebiandovecot - security updateNo score- imagemagickIn ImageMagick 7.0.4-9, an infinite loop can occur because of a floating-point rounding error in...7.5 High
- linux kernelcrypto/ahash.c in the Linux kernel through 4.10.9 allows attackers to cause a denial of service ...7.5 High
- linux kernelIncorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the...5.5 Medium
- qemu, debian linux +1 moreThe (1) v9fs_create and (2) v9fs_lcreate functions in hw/9pfs/9p.c in QEMU (aka Quick Emulator)...6.0 Medium
- [unknown] dovecot, debian linux +1 moreDovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb...3.7 Low
- web2pyweb2py is vulnerable to password brute-force attack9.8 Critical
- gnu binutilselflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU...9.8 Critical
- libaacplus project libaacplusaacplusenc.c in HE-AAC+ Codec (aka libaacplus) 2.0.2 has an assertion failure, which might allow...7.8 High
- libaacplus project libaacplusau_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a left-shift undefined behavior issue,...7.8 High
- libaacplus project libaacplusau_channel.h in HE-AAC+ Codec (aka libaacplus) 2.0.2 has a signed integer overflow, which might...7.8 High
- openidm project openidmOpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks...6.1 Medium
- openidm project openidmOpenIDM through 4.0.0 and 4.5.0 is vulnerable to persistent cross-site scripting (XSS) attacks...6.1 Medium
- openidm project openidmIn OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a...6.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreelflint.c in elfutils 0.168 does not validate the number of sections and the number of segments,...5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe check_sysv_hash function in elflint.c in elfutils 0.168 allows remote attackers to cause a...5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe check_symtab_shndx function in elflint.c in elfutils 0.168 allows remote attackers to cause a...5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe check_group function in elflint.c in elfutils 0.168 allows remote attackers to cause a denial...5.5 Medium
- elfutils project elfutilself_compress.c in elfutils 0.168 does not validate the zlib compression factor, which allows...5.5 Medium
- elfutils project elfutils, canonical ubuntu linux, debian linux +2 moreThe ebl_object_note_type_name function in eblobjnotetypename.c in elfutils 0.168 allows remote...5.5 Medium
- elfutils project elfutilsThe handle_gnu_hash function in readelf.c in elfutils 0.168 allows remote attackers to cause a...5.5 Medium
- imagemagickcoders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type...6.5 Medium
- libtiffLibTIFF 4.0.7 has a signed integer overflow, which might allow remote attackers to cause a denial...7.8 High
- libtiffLibTIFF 4.0.7 has a "shift exponent too large for 64-bit type long" undefined behavior issue,...7.8 High
- libtiffLibTIFF 4.0.7 has an "outside the range of representable values of type unsigned char" undefined...7.8 High
- libtiffLibTIFF 4.0.7 has an "outside the range of representable values of type short" undefined behavior...7.8 High
- libtifftif_dirread.c in LibTIFF 4.0.7 might allow remote attackers to cause a denial of service (divide...7.8 High
- libtifftif_dirread.c in LibTIFF 4.0.7 has an "outside the range of representable values of type float"...7.8 High
- libtiffLibTIFF 4.0.7 has an "outside the range of representable values of type float" undefined behavior...7.8 High
- libtiffThe JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a...5.5 Medium
- libtiffThe OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote...5.5 Medium
- libtifftif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might...5.5 Medium
- libtiffThe putagreytile function in tif_getimage.c in LibTIFF 4.0.7 has a left-shift undefined behavior...7.8 High
- schneider-electric interactive graphical scada systemA DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System ...7.8 High
- schneider-electric conext combox 865-1058 firmwareAn issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware...7.5 High
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Qualcomm sound driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local...7.0 High
- Show moreLoading…