CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- netikus eventsentryNetikus EventSentry before 3.2.1.44 has XSS via SNMP.6.1 Medium
- cloudviewnms cloudview nmsCloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct...7.5 High
- cloudviewnms cloudview nmsCloudView NMS before 2.10a has XSS via a TELNET login.6.1 Medium
- cloudviewnms cloudview nmsCloudView NMS before 2.10a has a format string issue exploitable over SNMP.9.8 Critical
- cloudviewnms cloudview nmsCloudView NMS before 2.10a has XSS via SNMP.6.1 Medium
- oxidforge oxid eshopOXID eShop before 2016-06-13 allows remote attackers to execute arbitrary code via a GET or POST...8.8 High
- sierrawireless aleos firmwareSierra Wireless GX 440 devices with ALEOS firmware 4.3.2 execute the management web application...8.8 High
- sierrawireless aleos firmwareSierra Wireless GX 440 devices with ALEOS firmware 4.3.2 store passwords in cleartext.9.8 Critical
- sierrawireless aleos firmwareSierra Wireless GX 440 devices with ALEOS firmware 4.3.2 use guessable session tokens, which are...9.8 Critical
- sierrawireless aleos firmwareSierra Wireless GX 440 devices with ALEOS firmware 4.3.2 do not require authentication for...9.8 Critical
- sierrawireless aleos firmwareSierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Hayes AT command injection.8.8 High
- sierrawireless aleos firmwareSierra Wireless GX 440 devices with ALEOS firmware 4.3.2 have weak passwords for admin, rauser,...9.8 Critical
- sierrawireless aleos firmwareSierra Wireless GX 440 devices with ALEOS firmware 4.3.2 allow Embedded_Ace_Set_Task.cgi command...9.8 Critical
- osram lightify proOSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive...6.5 Medium
- osram lightify proOSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.7.5 High
- osram lightify proOSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.7.5 High
- osram lightify proOSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.7.5 High
- osram lightify proOSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless...6.1 Medium
- osram lightify homeOSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.7.5 High
- osram lightify homeOSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary...9.8 Critical
- osram lightify homeOSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.7.5 High
- osram lightify homeOSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var...7.5 High
- jivesoftware jiveJive before 2016.3.1 has an open redirect from the external-link.jspa page.6.1 Medium
- atlassian bitbucketAtlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an...4.3 Medium
- atlassian jiraAtlassian JIRA Server before 7.1.9 has CSRF in auditing/settings.8.8 High
- atlassian jiraAtlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a...4.8 Medium
- atlassian confluenceAtlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.5.4 Medium
- opencvImproper Input Validation in OpenCV5.5 Medium
- opencv, debian linux +1 moreDouble Free in OpenCV8.8 High
- eparaksts edoc-libraries, eparakstitajs 3 +1 moreLVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to read arbitrary...5.5 Medium
- eparaksts edoc-libraries, eparakstitajs 3 +1 moreLVRTC eParakstitajs 3.0 (1.3.0) and edoc-libraries-2.5.4_01 allow attackers to write to arbitrary...5.5 Medium
- axis communications firmwareAXIS Communications products with firmware through 5.80.x allow remote attackers to modify...7.5 High
- axis communications firmwareAXIS Communications products allow CSRF, as demonstrated by admin/pwdgrp.cgi, vaconfig.cgi, and...8.8 High
- amazon fire osStack-based buffer overflow in the havok_write function in drivers/staging/havok/havok.c in...9.8 Critical
- dell integrated remote access controller firmwareDell Integrated Remote Access Controller (iDRAC) 6 before 2.85 and 7/8 before 2.30.30.30 has XSS.6.1 Medium
- dell integrated remote access controller firmwareDell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute...8.8 High
- dell integrated remote access controller firmwareDell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has XXE.9.8 Critical
- dell integrated remote access controller firmwareDell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows...9.8 Critical
- dell integrated remote access controller firmwareDell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue...9.8 Critical
- dell integrated remote access controller firmwareDell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows...7.8 High
- proxygen project proxygenFacebook Proxygen before 2015-11-09 mismanages HTTPMessage.request state, which allows remote...7.5 High
- proxygen project proxygenThe SPDY/2 codec in Facebook Proxygen before 2015-11-09 truncates a certain field to two bytes,...9.8 Critical
- proxygen project proxygenThe SPDY/2 codec in Facebook Proxygen before 2015-11-09 allows remote attackers to conduct...7.5 High
- vertiv liebert multilink automated shutdownLiebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing...7.8 High
- opsviewOpsview before 2015-11-06 has XSS via SNMP.6.1 Medium
- castlerock snmpcCastle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter.8.8 High
- castlerock snmpcCastle Rock Computing SNMPc before 2015-12-17 has XSS via SNMP.6.1 Medium
- spiceworks desktopSpiceworks Desktop before 2015-12-01 has XSS via an SNMP response.6.1 Medium
- summerinfant baby zoom wifi monitor firmwareSummer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain...8.8 High
- summerinfant baby zoom wifi monitor firmwareSummer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to bypass...9.8 Critical
- Show moreLoading…