CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- ntt photoptPhotopt for Android before 2.0.1 does not verify SSL certificates.5.9 Medium
- cybozu kunaiCybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify...6.8 Medium
- cybozu kintoneKintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.5.9 Medium
- tenable applianceTenable Appliance 3.5 - 4.4.0, and possibly prior versions, contains a flaw in the simpleupload...9.8 Critical
- tenable applianceTenable Appliance 4.4.0, and possibly prior, contains a flaw in the Web UI that allows for the...7.5 High
- podofo project podofoThe function TextExtractor::ExtractText in TextExtractor.cpp:77 in PoDoFo 0.9.5 allows remote...6.5 Medium
- d-link dap-1353 h\/w b1 firmware, dap-2553 h\/w a1 firmware, dap-3520 h\/w a1 firmware +2 moreD-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and...8.1 High
- dlink dap-2230 firmware, dap-2310 firmware, dap-2330 firmware +7 more +9 moreBuffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and...9.8 Critical
- netgear wnap320 firmware, wndap350 firmware, wndap360 firmware +2 moreNetgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and...9.8 Critical
- netgear wn604 firmware, wnap320 firmware, wnd930 firmware +3 more +5 moreInformation disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360...7.5 High
- netgear wireless access point (wap) devices, wn604 firmware, wn802tv2 firmware +5 more +7 more(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5)...9.8 Critical
- clusterlabs pcs, fedoraproject fedora, redhat enterprise linux +2 moreSession fixation vulnerability in pcsd in pcs before 0.9.157.8.1 High
- clusterlabs pcs, fedoraproject fedora, redhat enterprise linux +2 moreCross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.8.8 High
- [unknown] minicomA buffer overflow flaw was found in the way minicom before version 2.7.1 handled VT100 escape...7.0 High
- heartland payment systems heartland-phpHeartland Payment Systems Payment Gateway PHP SDK hps/heartland-php v2.8.17 is vulnerable to a...6.1 Medium
- securebrain phishwall clientUntrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before...7.8 High
- cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.4.3 Medium
- toshiba coordinate plusCoordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and...5.9 Medium
- aeon waonWAON "Service Application" for Android 1.4.1 and earlier does not verify SSL certificates.5.9 Medium
- akindo-sushiro sushiroSushiro App for iOS 2.1.16 and earlier and Sushiro App for Android 2.1.16.1 and earlier do not...5.9 Medium
- dmm ppv play playerDMM Movie Player App for Android before 1.2.1, and DMM Movie Player App for iPhone/iPad before 2...5.9 Medium
- cybozu garoonCybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.6.5 Medium
- tokyostarbank tokyo star bankTokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not...5.9 Medium
- photosynth akerunAkerun - Smart Lock Robot App for iOS before 1.2.4 does not verify SSL certificates.8.1 High
- google androidAndroid allows users to cause a denial of service.7.5 High
- wondercmsWonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context.8.8 High
- paloaltonetworks pan-osPalo Alto Networks PAN-OS before 7.0.15 has XSS in the GlobalProtect external interface via...6.1 Medium
- opentext documentum content serverOpenText Documentum Content Server allows superuser access via sys_obj_save or save of a crafted...8.8 High
- opera mini, browser +1 moreOpera Mini 13 and Opera Stable 36 allow remote attackers to spoof the displayed URL via a crafted...6.1 Medium
- openmrs module reportingThe Reporting Module 1.12.0 for OpenMRS allows CSRF attacks with resultant XSS, in which...8.8 High
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and...7.8 High
- cisco integrated management controller, integrated management controller supervisor +1 moreA vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c)...8.8 High
- cisco integrated management controller, integrated management controller supervisor +1 moreA vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c)...5.4 Medium
- cisco integrated management controller, integrated management controller supervisor +1 moreA vulnerability in the session identification management functionality of the web-based GUI of...5.4 Medium
- cisco integrated management controller, integrated management controller supervisor +1 moreA vulnerability in the web-based GUI of Cisco Integrated Management Controller (IMC) 3.0(1c)...8.8 High
- cisco ios xe, ios xe software +1 moreA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE 3.16...6.3 Medium
- cisco findit network probeA vulnerability in the file-download feature of the web user interface for Cisco FindIT Network...6.5 Medium
- cisco prime network registrarA vulnerability in the DNS input packet processor for Cisco Prime Network Registrar could allow...5.8 Medium
- cisco prime infrastructureA vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an...6.1 Medium
- cisco adaptive security appliance softwareA vulnerability in the Internet Key Exchange Version 1 (IKEv1) XAUTH code of Cisco ASA Software...7.7 High
- cisco adaptive security appliance softwareA vulnerability in the IPsec code of Cisco ASA Software could allow an authenticated, remote...7.7 High
- cisco adaptive security appliance softwareA vulnerability in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) code of...8.6 High
- cisco adaptive security appliance softwareA vulnerability in the DNS code of Cisco ASA Software could allow an unauthenticated, remote...8.7 High
- cloudfoundry cf-releaseThe Cloud Controller in Cloud Foundry cf-release versions prior to v255 allows authenticated...6.5 Medium
- cisco ios, ios xe +1 moreMultiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and...8.6 High
- cisco ios, ios xe +1 moreMultiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and...8.6 High
- cisco ios, ios xe +1 moreMultiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and...8.6 High
- cisco ios, ios xe +1 moreMultiple vulnerabilities in the EnergyWise module of Cisco IOS (12.2 and 15.0 through 15.6) and...8.6 High
- cisco unified communications managerA vulnerability in the Session Initiation Protocol (SIP) UDP throttling process of Cisco Unified...7.5 High
- cisco adaptive security appliance softwareA vulnerability in the TCP normalizer of Cisco Adaptive Security Appliance (ASA) Software (8.0...4.0 Medium
- Show moreLoading…