CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- drupalDrupal access control bypass vulnerability7.5 High
- No product listedurllib FTP protocol stream injectionNo score
uzbek-wordlistDebianuzbek-wordlist - updateNo scorehunspell-en-usDebianhunspell-en-us - updateNo score- libimobiledevice libplistInteger overflow in the plist_from_bin function in bplist.c in libimobiledevice/libplist before...5.5 Medium
- mor-pah.net dmitry deepmagic information gathering toolStack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix)...9.8 Critical
- qemu, debian linux +1 morehw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreFixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex....9.8 Critical
- mozilla firefoxAn issue with incorrect ownership model of "privateBrowsing" information exposed through...9.1 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreA potential memory corruption and crash when using Skia content when drawing content outside of...7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreIf a page is loaded from an original site through a hyperlink and contains a redirect to a "data...6.1 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash...9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreDuring DOM manipulations of the accessibility tree through script, the DOM tree can become out of...9.8 Critical
- mozilla firefox, firefox esr, network security services +2 more +4 moreA flaw in DRBG number generation within the Network Security Services (NSS) library where the...5.3 Medium
- mozilla network security services, firefox, firefox esr +1 more +3 moreMozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in frame selection triggered by a combination of malicious script...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable...9.8 Critical
- mozilla firefoxWhen a "javascript:" URL is drag and dropped by a user into the addressbar, the URL will be...6.1 Medium
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreA mechanism to bypass file system access protections in the sandbox using the file system request...9.8 Critical
- mozilla firefox, firefox esr, redhat enterprise linux +5 more +7 moreThe internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and...7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to bypass file system access protections in the sandbox to use the file picker to...7.5 High
- mozilla firefoxA mechanism to inject static HTML into the RSS reader preview page due to a failure to escape...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA mechanism to spoof the addressbar through the user interaction on the addressbar and the ...4.3 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA possibly exploitable crash triggered during layout and manipulation of bidirectional unicode...7.5 High
- mozilla firefox, firefox esr, debian linux +6 more +8 moreAn out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media...8.6 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read during the processing of glyph widths during text layout. This results in a...9.1 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA vulnerability while parsing "application/http-index-format" format content where uninitialized...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow vulnerability while parsing "application/http-index-format" format content when...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreAn out-of-bounds write vulnerability while decoding improperly formed BinHex format archives....9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during changes in style when manipulating DOM elements. This...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability when holding a selection during scroll events. This results in a...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to a failure to propagate error...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to poor handling of template parameters...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability during XSLT processing due to the result handler being held by a...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite...8.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during transaction processing in the editor during design...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreA use-after-free vulnerability occurs when redirecting focus handling which results in a...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability in SMIL animation functions occurs when pointers to animation...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability occurs during certain text input selection resulting in a...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +3 more +5 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMemory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird...9.8 Critical
- samsung mobileSamsung Android devices with L(5.0/5.1), M(6.0), and N(7.x) software allow attackers to obtain...7.5 High
- aescrypt project aescryptAescrypt does not sufficiently use random values7.5 High
- zyxel wre6505 firmwareZyxel WRE6505 devices have a default TELNET password of 1234 for the root and admin accounts,...10.0 Critical
- php** DISPUTED ** The GNU Multiple Precision Arithmetic Library (GMP) interfaces for PHP through 7.1...7.5 High
- entropymine imageworsenerThe iwgif_read_image function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows...5.5 Medium
- gnome libcroco** DISPUTED ** The cr_tknzr_parse_rgb function in cr-tknzr.c in libcroco 0.6.11 and 0.6.12 has an...7.8 High
- gnome libcrocoThe cr_input_new_from_uri function in cr-input.c in libcroco 0.6.11 and 0.6.12 allows remote...5.5 Medium
- artifex ghostscriptInteger overflow in the mark_curve function in Artifex Ghostscript 9.21 allows remote attackers...7.8 High
- Show moreLoading…