CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- microsoft windows, windows 10, windows 8.1 +3 more +5 moreA Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows...3.3 Low
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a...5.8 Medium
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a...5.8 Medium
- microsoft corporation hyper-v, microsoft windows 10, windows 8.1 +3 more +5 moreA denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to...5.4 Medium
- microsoft windows 10, windows 8.1, windows server 2008 +3 more +5 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a...5.8 Medium
- microsoft windows 10, windows 8.1, windows server 2008 +3 more +5 moreA denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a...5.8 Medium
- microsoft windows 10, windows server 2016, microsoft corporation windows hyper-v +3 more +5 moreA remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a...7.6 High
- microsoft corporation windows hyper-v, microsoft windows 10, windows 8.1 +3 more +5 moreA remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a...7.6 High
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreA denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows...5.8 Medium
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreA denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10...5.4 Medium
- microsoft windows 8.1, windows server 2012, microsoft corporation windows hyper-v +2 moreAn information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1,...5.4 Medium
- microsoft windows 8.1, windows server 2008, windows server 2012 +1 more +3 moreAn information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on...5.8 Medium
- microsoft windows, windows 10, windows 8.1 +3 more +5 moreAn information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server...5.5 Medium
- microsoft corporation ldap, microsoft windows 10, windows 7 +6 more +8 moreAn elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are...8.1 High
- microsoft windows, windows 10, windows 8.1 +2 more +4 moreAn elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10,...7.8 High
- microsoft windows 10, windows server 2016, microsoft corporation active directory +2 moreA denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active...4.4 Medium
- microsoft corporation windows hyper-v, microsoft windows 10, windows 8.1 +3 more +5 moreA remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a...7.6 High
- microsoft windows 10, windows 8.1, windows server 2012 +2 more +4 moreA remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a...7.6 High
- microsoft .net frameworkMicrosoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with...7.8 High
- microsoft windows, windows 10, windows server 2012 +1 more +3 moreA security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and...3.7 Low
- microsoft windows, windows 10, windows 8.1 +6 more +8 moreAn elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10,...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreAn elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows...7.0 High
- microsoft windows 7, windows server 2008, windows vista +1 more +3 moreThe Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and...7.0 High
- microsoft office, outlook +1 moreMicrosoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft...7.8 High
- aveva edgeA remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting...7.5 High
- microsoft windows, windows 10, windows 7 +6 more +8 moreA Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k...4.7 Medium
- adobe flash playerAdobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption...7.8 High
- adobe flash playerAdobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free...9.8 Critical
- adobe flash playerAdobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free...9.8 Critical
- adobe flash playerAdobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption...9.8 Critical
- adobe flash playerAdobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption...9.8 Critical
- adobe flash playerAdobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free...9.8 Critical
- adobe flash playerAdobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free...7.8 High
- brother ads firmware, dcp firmware, hl firmware +1 more +3 moreOn certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in...9.8 Critical
- wiresharkIn Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed...7.5 High
- wiresharkIn Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a...7.5 High
- trendmicro threat discovery applianceOn the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a...9.8 Critical
- trendmicro threat discovery applianceA command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the...9.8 Critical
- libsndfile project libsndfileIn libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be...5.5 Medium
- libsndfile project libsndfileIn libsndfile before 1.0.28, an error in the "flac_buffer_copy()" function (flac.c) can be...5.5 Medium
- isc bind, bind 9, debian linux +3 more +5 morenamed exits with a REQUIRE assertion failure if it receives a null command string on its control channel6.5 Medium
- isc bind, bind 9, debian linux +9 more +11 moreA response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME7.5 High
- isc bind, bind 9, debian linux +9 more +11 moreAn error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;"5.9 Medium
- libsamplerate project libsamplerate, debian linux +1 moreIn libsamplerate before 0.1.9, a buffer over-read occurs in the calc_output_single function in...5.5 Medium
- bigtreecms bigtree cmsUnrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.php...9.8 Critical
- getsymphony symphonyRemote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in...8.8 High
- sap trexA code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The...9.8 Critical
- schneider-electric homelynk controller lss100100 firmwareA Command Injection vulnerability in Schneider Electric homeLYnk Controller exists in all...9.8 Critical
- samsung galaxy s6SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to...8.8 High
- google chromeA use-after-free in AnimationController::endAnimationUpdate in Google Chrome.9.8 Critical
- Show moreLoading…