CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- moxa mxviewMoxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.7.5 High
- paloaltonetworks trapsPalo Alto Networks Traps ESM Console before 3.4.4 allows attackers to cause a denial of service...7.5 High
- paloaltonetworks pan-osThe Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote...7.8 High
- paloaltonetworks pan-osThe Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9...4.3 Medium
- bitrix project bitrixMultiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow...8.0 High
- ffmpegFFmpeg before 2017-01-23 has an out-of-bounds write caused by a stack-based buffer overflow...9.8 Critical
- ffmpeg, debian linux +1 moreFFmpeg before 2017-01-24 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- freetypeFreeType 2 before 2017-02-02 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- ffmpeg, debian linux +1 moreFFmpeg before 2017-02-04 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- ffmpegFFmpeg before 2017-02-07 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- grpcGoogle gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core...9.8 Critical
- grpcGoogle gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- ffmpegFFmpeg before 2017-03-05 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- freetypeFreeType 2 before 2017-03-07 has an out-of-bounds write related to the TT_Get_MM_Var function in...9.8 Critical
- freetypeFreeType 2 before 2017-03-08 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- libreofficeLibreOffice before 2017-03-11 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
openoffice.org-dictionariesDebianopenoffice.org-dictionaries - updateNo score- libreofficeLibreOffice before 2017-01-02 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- gnu gnutlsGnuTLS before 2017-02-20 has an out-of-bounds write caused by an integer overflow and heap-based...7.5 High
- icu-project international components for unicode, debian linux +1 moreInternational Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write...7.5 High
- icu-project international components for unicode, debian linux +1 moreInternational Components for Unicode (ICU) for C/C++ before 2017-02-13 has an out-of-bounds write...7.5 High
- freetype, oracle outside in technology +1 moreFreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- libreofficeLibreOffice before 2016-12-22 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable information disclosure vulnerability exists in the Web Application functionality...7.5 High
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable null pointer dereference vulnerability exists in the Web Application /forms...7.5 High
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable information disclosure vulnerability exists in the Web Application functionality...5.3 Medium
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable information disclosure vulnerability exists in the serviceAgent functionality of...5.3 Medium
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable null pointer dereference exists in the Web Application functionality of Moxa AWK...7.5 High
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable Information Disclosure vulnerability exists in the Web Application functionality...5.3 Medium
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable HTTP Header Injection vulnerability exists in the Web Application functionality of...3.1 Low
- moxa awk-3131a series industrial ieee 802.11a/b/g/n wireless ap/bridge/client, awk-3131a firmware +1 moreAn exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK...5.9 Medium
- sap business intelligence platformSQL injection vulnerability in SAP Business Intelligence platform before January 2017 allows...9.8 Critical
- concretecms concrete cmsConcrete CMS vulnerable to cross-site scripting (XSS)6.1 Medium
- sony snc series firmwareSONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC...8.8 High
- novastor novabackup datacenterThe datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is...9.8 Critical
- novastor novabackup datacenterThe datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is...9.8 Critical
- google androidHTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0...9.8 Critical
- grabacr.net kancolleviewerKanColleViewer versions 3.8.1 and earlier operates as an open proxy which allows remote attackers...9.1 Critical
- iodata rockdisk firmwareCross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1...5.4 Medium
- google chromeGoogle Chrome caches TLS sessions before certificate validation occurs.6.5 Medium
- google skiaSkRegion::setPath in Skia allows remote attackers to cause a denial of service (crash).7.5 High
- umbraco cmsThe FeedProxy.aspx script in Umbraco 4.7.0 allows remote attackers to proxy requests on their...9.8 Critical
- radare radare2The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a...5.5 Medium
- samsung galaxy note 3 firmware, galaxy s4 firmware, galaxy s4 mini firmware +2 more +4 moreSamsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3),...4.6 Medium
- samsung galaxy note 3 firmware, galaxy s4 firmware, galaxy s4 mini firmware +2 more +4 moreSamsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3),...6.8 Medium
- samsung galaxy note 3 firmware, galaxy s4 firmware, galaxy s4 mini firmware +2 more +4 moreSamsung SM-G920F build G920FXXU2COH2 (Galaxy S6), SM-N9005 build N9005XXUGBOK6 (Galaxy Note 3),...6.8 Medium
- samsung galaxy note 3 firmware, galaxy s6 firmware +1 moresecfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F...3.3 Low
- samsung galaxy s6 firmwareSamsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices has SQL injection, aka...9.8 Critical
- samsung galaxy s6 firmwareSamsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read...3.3 Low
- samsung galaxy note 3 firmware, galaxy s6 firmware +1 moreThe getURL function in drivers/secfilter/urlparser.c in secfilter in the Samsung kernel for...5.5 Medium
- Show moreLoading…