CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- samsung kiesSamsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury.6.4 Medium
- gnu osipIn libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer...7.5 High
- gnu osipIn libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the...7.5 High
- gnu osipIn libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the...7.5 High
- gnu osipIn libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the...9.8 Critical
- google androidmediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE:...9.8 Critical
- google androidmediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE:...9.8 Critical
- apple mac os x, mac os x server +1 moreApple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through 10.6.3 allows local users to...7.8 High
- apple mac os x, mac os x server +1 moreBuffer overflow in ImageIO in Apple Mac OS X 10.6 through 10.6.3 and Mac OS X Server 10.6 through...7.8 High
- citrix netscaler gateway firmwareA heap overflow vulnerability in Citrix NetScaler Gateway versions 10.1 before 135.8/135.12, 10.5...8.8 High
- sap hanaSAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors...9.8 Critical
- netty, apache cassandra, redhat jboss data grid +1 more +3 moreLoop with Unreachable Exit Condition in Netty7.5 High
- eclipse jettyJetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request9.8 Critical
- pulpproject pulpPulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner.5.3 Medium
- atutorSQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote...9.8 Critical
- blackberry enterprise serviceMultiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12)...6.1 Medium
- blackberry enterprise serviceMultiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in...8.8 High
- docomo shoplatShoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.7.5 High
- firejail project firejailFirejail allows --chroot when seccomp is not supported, which might allow local users to gain...7.8 High
- firejail project firejailFirejail does not properly clean environment variables, which allows local users to gain privileges.7.8 High
- firejail project firejailFirejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local...7.8 High
- firejail project firejailFirejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var...7.8 High
- firejail project firejailFirejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.7.8 High
- firejail project firejailFirejail allows local users to truncate /etc/resolv.conf via a chroot command to /.3.3 Low
- firejail project firejailFirejail does not restrict access to --tmpfs, which allows local users to gain privileges, as...7.8 High
- seawell networks spectrum sdcSeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative...8.8 High
- seawell networks spectrum sdcDirectory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.6.5 Medium
- seawell networks spectrum sdcSeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.9.8 Critical
- huawei p7 firmware, p8 ale-ul00 firmware +1 moreHuawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE...5.5 Medium
- gnu a2psFormat string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code.7.8 High
- huawei p7 firmware, p8 ale-ul00 firmware +1 moreHuawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE...5.5 Medium
- emberjs ember.jsember-source Cross-site Scripting vulnerability6.1 Medium
- saltstack salt, fedoraproject fedora +1 moreSaltStack has insecure /tmp file handling in salt/modules/chef.py5.3 Medium
- saltstack salt, fedoraproject fedora +1 moreSalt improper handling of tmp files5.3 Medium
- oliver project oliverMultiple cross-site scripting (XSS) vulnerabilities in Oliver (formerly Webshare) 1.3.1 and...6.1 Medium
sblim-sfcbSUSE,sblim-sfcb-openssl1SUSE +1 moreSecurity update for sblim-sfcbNo score- smart related articles project related articlesThe "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker...9.8 Critical
- smart related articles project related articlesThe "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog...5.3 Medium
- smart related articles project related articlesThe "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET...6.1 Medium
- rtmpdump project rtmpdumpRTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and...6.5 Medium
- rtmpdump project rtmpdumpThe AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute...9.8 Critical
- rtmpdump project rtmpdumpThe AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite...7.5 High
- Show moreLoading…