CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- cisco secure firewall management centerA vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol...8.6 High
- ibm security guardiumIBM Security Guardium 8.2, 9.0, and 10.0 contains a vulnerability that could allow a local...7.4 High
- ibm curam social program managementIBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm curam social program managementIBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm curam social program managementIBM Curam Social Program Management 5.2, 6.0, and 7.0 could allow an authenticated attacker to...4.3 Medium
- ibm curam social program managementIBM Curam Social Program Management 5.2, 6.0, and 7.0 contains a vulnerability that would allow...4.3 Medium
- redhat jboss bpm suite, jboss enterprise brms platform +1 moreCross-site request forgery (CSRF) vulnerability in Red Hat JBoss BRMS and BPMS 6 allows remote...8.8 High
- moodleMoodle Cross-site request forgery (CSRF) vulnerability8.8 High
- moodleMoodle Improper Access Control4.3 Medium
- moodleMoodle sensitive information disclosure4.3 Medium
- moodleMoodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to...5.3 Medium
- moodleMoodle Improper Access Control6.5 Medium
- zohocorp password manager proCross-site request forgery (CSRF) vulnerability in ManageEngine Password Manager Pro before 8.5 ...8.0 High
- quickheal total securityThe webssx.sys driver in QuickHeal 16.00 allows remote attackers to cause a denial of service.7.5 High
- aveva wonderware intouch access anywhereAn Inadequate Encryption Strength issue was discovered in Schneider Electric Wonderware InTouch...5.3 Medium
- aveva wonderware intouch access anywhereAn Information Exposure issue was discovered in Schneider Electric Wonderware InTouch Access...9.8 Critical
- aveva wonderware intouch access anywhereA Cross-Site Request Forgery issue was discovered in Schneider Electric Wonderware InTouch Access...8.8 High
- netiq access managerNetIQ Access Manager 4.2.2 and 4.3.x before 4.3.1+, when configured as an Identity Server, has...6.1 Medium
- hyland software, inc. perceptive document filtersAn exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document...4.3 Medium
- moxa awk-3131a firmware, awk-3131a wap +1 moreAn exploitable OS Command Injection vulnerability exists in the web application 'ping'...9.1 Critical
- cs-cartTwigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9...8.8 High
- linecorp lineLINE for Windows before 4.8.3 allows man-in-the-middle attackers to execute arbitrary code.8.1 High
- cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.4.3 Medium
- cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.6.5 Medium
- cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.4.3 Medium
- dmm dmmfx demo trade, dmmfx trade, gaitamejapan fx trade +2 moreDMMFX Trade for Android 1.5.0 and earlier, DMMFX DEMO Trade for Android 1.5.0 and earlier, and...5.9 Medium
- cybozu garoonCybozu Garoon before 4.2.2 does not properly restrict access.4.3 Medium
- cybozu garoonSQL injection vulnerability in Cybozu Garoon before 4.2.2.8.8 High
- cybozu garoonCross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon...6.1 Medium
- cybozu garoonCross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon...6.1 Medium
- cybozu garoonCross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4...6.1 Medium
- cybozu garoonCross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon...6.1 Medium
- cybozu garoonThe "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users...6.1 Medium
- redhat resteasyImproper Neutralization of Input During Web Page Generation in RESTEasy6.1 Medium
- ovirtoVirt Engine before 4.0.3 does not include DWH_DB_PASSWORD in the list of keys to hide in log...5.5 Medium
- redhat enterprise virtualizationovirt-engine-webadmin, as used in Red Hat Enterprise Virtualization Manager (aka RHEV-M) for...6.8 Medium
- mediawikiMediaWiki 1.27.x before 1.27.1 might allow remote attackers to bypass intended session access...7.5 High
- novell groupwiseInteger overflow in the Post Office Agent in Novell GroupWise before 2014 R2 Service Pack 1 Hot...9.8 Critical
- novell groupwiseCross-site scripting (XSS) vulnerability in Novell GroupWise before 2014 R2 Service Pack 1 Hot...6.1 Medium
- novell groupwiseMultiple cross-site scripting (XSS) vulnerabilities in the administrator console in Novell...6.1 Medium
- redhat openshiftRed Hat OpenShift Enterprise 2 does not include the HTTPOnly flag in a Set-Cookie header for the...7.5 High
- geeklog project geeklogMultiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote...6.1 Medium
- ossec web uiCross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows...6.1 Medium
- apple tvos, iphone os, mac os x +2 moreHeap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and...7.8 High
- hancom office 2014Multiple heap-based buffer overflows in the (1) CBookBase::SetDefTableStyle and (2) CBookBase:...7.8 High
- cybozu garoonCybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors...9.8 Critical
- netiq access managerNetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0...3.1 Low
- squirrelmailSquirrelMail 1.4.22 (and other versions before 20170427_0200-SVN) allows post-authentication...8.8 High
- unitrends enterprise backupAn authenticated user of Unitrends Enterprise Backup before 9.1.2 can execute arbitrary OS...8.8 High
- unitrends enterprise backupAn issue was discovered in Unitrends Enterprise Backup before 9.1.1. The function downloadFile in...5.5 Medium
- Show moreLoading…