CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- eyesofnetworkMultiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote...7.2 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moresetroubleshoot allows local users to bypass an intended container protection mechanism and...7.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by...7.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to...7.0 High
- setroubleshoot project setroubleshoot, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary...7.0 High
- xmlsoft libxml2** DISPUTED ** libxml2 2.9.4, when used in recover mode, allows remote attackers to cause a...4.7 Medium
- apache tomeeThe EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote...9.8 Critical
- intellinet-network nfc-30ir firmwareIntellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a...9.8 Critical
- intellinet-network nfc-30ir firmwareDirectory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP...4.9 Medium
- unisys secure partitioningUnquoted Windows search path vulnerability in the guest service in Unisys s-Par before 4.4.20...6.7 Medium
- kony enterprise mobile managementKony Enterprise Mobile Management (EMM) before 4.2.5.2 has the vulnerability of disclosing the...6.5 Medium
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreSQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3...8.8 High
- f5 networks big-ip apm, f5 big-ip access policy manager +1 moreThe TMM SSO plugin in F5 BIG-IP APM 12.0.0 - 12.1.1, 11.6.0 - 11.6.1 HF1, 11.5.4 - 11.5.4 HF2,...5.3 Medium
- apache hadoopInsecure Inherited Permissions in Apache Hadoop8.8 High
- symantec corporation ssl visibility, bluecoat ssl visibility appliance sv1800 firmware, ssl visibility appliance sv2800 firmware +2 more +4 moreSymantec SSL Visibility (SSLV) 3.8.4FC, 3.9, 3.10 before 3.10.4.1, and 3.11 before 3.11.3.1 is...5.9 Medium
- auromeera emliCross Site Scripting Vulnerability in core-eMLi in AuroMeera Technometrix Pvt. Ltd. eMLi V1.0...6.1 Medium
dovecotDebiandovecot - regression updateNo score- foscam c1, c1 lite, c2 +9 more +11 moreFoscam networked devices use the same hardcoded SSL private key across different customers'...8.1 High
- solarwinds log \& event managerSolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to...8.8 High
- solarwinds log \& event managerSolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to browse...6.5 Medium
- lenovo updatesRemote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle...8.1 High
- lenovo customer care software development kit, lenovo group ltd. customer care software development kit (ccsdk) +1 morePrivilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier...7.8 High
- synology photo stationSynology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid...7.8 High
- synology photo stationSynology Photo Station before 6.3-2958 allows remote authenticated guest users to execute...8.8 High
- fiyo cmsIn Fiyo CMS 2.x through 2.0.7, attackers may upload a webshell via the content parameter to "...9.8 Critical
- entropymine imageworsenerThe iw_read_bmp_file function in imagew-bmp.c in libimageworsener.a in ImageWorsener 1.3.0 allows...5.5 Medium
- entropymine imageworsenerThe iwmiffr_convert_row32 function in imagew-miff.c in libimageworsener.a in ImageWorsener 1.3.0...5.5 Medium
- deepin desktop environmentdde-daemon, the daemon process of DDE (Deepin Desktop Environment) 15.0 through 15.3, runs with...8.8 High
- libdwarf project libdwarfdwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service ...7.5 High
- netapp clustered data ontapNetApp OnCommand Performance Manager and OnCommand Unified Manager for Clustered Data ONTAP...5.3 Medium
- ninka project ninkaNinka before 1.3.2 might allow remote attackers to obtain sensitive information, manipulate...9.8 Critical
- cesanta mongoose embedded web server library, mongoose os +1 moreUse-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in...7.5 High
- netapp clustered data ontapNetApp Clustered Data ONTAP 8.1 through 9.1P1, when NFS or SMB is enabled, allows remote...7.5 High
- atlassian jiraThe JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML...9.8 Critical
- splunkSplunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2...3.5 Low
- botan project botanThe X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers...7.5 High
- botan project botanThe Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type,...9.8 Critical
- sap netweaverStack-based buffer overflow in SAP NetWeaver 7.0 through 7.5 allows remote attackers to cause a...9.8 Critical
- sap sql anywhereBuffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and...4.9 Medium
- botan project botanbotan 1.11.x before 1.11.22 improperly handles wildcard matching against hostnames, which might...9.8 Critical
- botan project botanbotan before 1.11.22 improperly validates certificate paths, which allows remote attackers to...7.5 High
- botan project botanbotan 1.11.x before 1.11.22 makes it easier for remote attackers to decrypt TLS ciphertext data...7.5 High
- digium asterisk, certified asterisk +1 moreRemote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3...8.8 High
- dlink dwr-116 firmwareDirectory traversal vulnerability in the web interface on the D-Link DWR-116 device with firmware...7.5 High
- cloudera cdhImpala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.7.5 High
- sap netweaver application server javaThe SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to...6.5 Medium
- opmantek network management information systemOpmantek NMIS before 4.3.7c has command injection via man, finger, ping, trace, and nslookup in...7.5 High
- smartbear swagger-uiCross-Site Scripting in swagger-ui6.1 Medium
- opmantek network management information systemOpmantek NMIS before 8.5.12G has XSS via SNMP.5.4 Medium
- paessler prtg network monitorPaessler PRTG before 16.2.24.4045 has XSS via SNMP.6.1 Medium
- Show moreLoading…