CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- tenable nessusNessus 6.10.x before 6.10.5 was found to be vulnerable to a local privilege escalation issue due...7.8 High
- tenable nessusNessus 6.10.x before 6.10.5 was found to be vulnerable to a local denial of service condition due...5.5 Medium
- firewalld, redhat enterprise linux desktop, enterprise linux hpc node +2 more +4 morefirewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify...5.5 Medium
- [unknown] curl, haxx libcurl +1 moreIn curl and libcurl 7.52.0 to and including 7.53.1, libcurl would attempt to resume a TLS session...4.8 Medium
- linux kernelThe cookie feature in the packet action API implementation in net/sched/act_api.c in the Linux...7.8 High
- artifex jbig2decArtifex jbig2dec 0.13 allows out-of-bounds writes and reads because of an integer overflow in the...7.1 High
- artifex jbig2decArtifex jbig2dec 0.13, as used in Ghostscript, allows out-of-bounds writes because of an integer...7.8 High
- radare radare2The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote...5.5 Medium
- phusion passengerPhusion Passenger uses a known /tmp filename7.8 High
- imagemagickThe ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an...6.5 Medium
- entropymine imageworsenerThe iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows...5.5 Medium
- entropymine imageworsenerThe read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0...5.5 Medium
- mantisbtMantisBT XSS via my_view_page.php and view_user_page.php6.1 Medium
- apache cxfSession Fixation in Apache CXF7.5 High
- apache cxfImproper Certificate Validation in Apache CXF5.3 Medium
- trendmicro interscan messaging security virtual applianceTrend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.6.1 Medium
- imagemagick, debian linux +1 moreThe ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an...6.5 Medium
- imagemagick, debian linux +1 moreThe ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an...6.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote...7.5 High
- apache batikImproper Restriction of XML External Entity Reference in Apache Batik7.3 High
- apache software foundation fop, apache formatting objects processor +1 moreImproper Restriction of XML External Entity Reference in Apache FOP7.3 High
- capnprotoSandstorm Cap'n Proto before 0.5.3.1 allows remote crashes related to a compiler optimization. A...7.5 High
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4j9.8 Critical
- ibm api connectIBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system...7.3 High
- ibm financial transaction managerIBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to...5.4 Medium
- ibm cognos tm1, cognos business intelligence +1 moreIBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm cognos tm1, cognos business intelligence +1 moreIBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid...5.7 Medium
- ibm cognos tm1, cognos business intelligence +1 moreIBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer...7.5 High
- ibm marketing platformIBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by...5.4 Medium
- apache traffic serverApache Traffic Server before 6.2.1 generates a coredump when there is a mismatch between content...7.5 High
- apache traffic serverApache Traffic Server 6.0.0 to 6.2.0 are affected by an HPACK Bomb Attack.7.5 High
- apache tomcatExpected Behavior Violation in Apache Tomcat9.8 Critical
- apache tomcatImproper Resource Shutdown or Release in Apache Tomcat7.5 High
- google androidThe Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute...9.8 Critical
- google androidUnspecified vulnerability in Qualcomm components in Android on Nexus 6 and Android One devices.9.8 Critical
- axis network camera firmwareMultiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.6.1 Medium
- cybozu officeCybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download"...3.5 Low
- cybozu officeCybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended...4.3 Medium
- cybozu officeCybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions...4.3 Medium
- cybozu officeCybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.6.5 Medium
- cybozu officeCross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated...5.4 Medium
- cybozu officeCybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page...6.5 Medium
- cybozu officeEmail header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to...4.3 Medium
- cybozu officeCybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu officeCross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with...4.8 Medium
- cybozu officeCross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with...4.8 Medium
- sourcebans-pp project sourcebans-ppsourcebans-pp (SourceBans++) 1.5.4.7 has XSS in admin.comms.php via the rebanid parameter.6.1 Medium
lz4-compresscrates.iolz4-compress is unmaintainedNo scorefreetypeDebianfreetype - security updateNo score- apache tomcatExposure of Resource to Wrong Sphere in Apache Tomcat9.1 Critical
- Show moreLoading…