CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:...5.4 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)....5.5 Medium
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....6.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....7.5 High
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). The...6.5 Medium
- oracle mysql, oracle corporation mysql server, debian linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling...7.5 High
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....7.7 High
- oracle mysql, oracle corporation mysql server, debian linux +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....7.7 High
- oracle mysql, oracle corporation mysql server, debian linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API)....5.3 Medium
- apache activemq, redhat jboss a-mq, jboss fuse +2 moreImproper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ2.7 Low
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without...5.3 Medium
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with...7.5 High
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is...9.8 Critical
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log...9.8 Critical
- tp-link tl-sg108e firmwareOn the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log...9.8 Critical
- weechat, debian linux +1 moreWeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. This...7.5 High
- invisioncommunity invision power boardInvision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying...5.9 Medium
- linux kernelThe cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x...7.8 High
- linux kerneldrivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without...5.5 Medium
- linux kerneldrivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the...7.8 High
- linux kerneldrivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the...7.8 High
- linux kerneldrivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the...7.8 High
- linux kerneldrivers/net/can/usb/gs_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts...7.8 High
- linux kernelcrypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the...7.8 High
- linux kerneldrivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts...7.8 High
- linux kerneldrivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7...7.8 High
- linux kerneldrivers/char/virtio_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts...7.8 High
- debian linux, linux kernel +1 moredrivers/media/usb/dvb-usb-v2/dvb_usb_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12...7.8 High
- linux kerneldrivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts...7.8 High
- watchguard firewareWatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity ...5.3 Medium
- watchguard firewareWatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login...5.3 Medium
- podofo project podofoThe function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows...5.5 Medium
- podofo project podofoPoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted...5.5 Medium
- craftcms craft cmsCraft CMS XSS Vulnerability6.1 Medium
- exponentcms exponent cmsExponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey...9.8 Critical
- irregex project irregexThe backtrack compilation code in the Irregex package (aka IrRegular Expressions) before 0.9.6...7.5 High
- google chromeSkia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same...7.5 High
- redhat cloudforms management enginePadding oracle flaw in CloudForms Management Engine (aka CFME) 5 allows remote attackers to...5.3 Medium
- shopwareShopware RCE Vulnerability9.8 Critical
- cygwinCygwin before 2.5.0 does not properly handle updating permissions when changing users, which...9.8 Critical
- google androidThe Broadcom Wi-Fi driver for Android, as used by BlackBerry smartphones before Build AAE570,...8.8 High
- fedoraproject fedora, vmware spring advanced message queuing protocol +1 moreImproper Input Validation in Spring AMQP9.8 Critical
- exagrid ex10000e firmware, ex13000e firmware, ex21000e firmware +5 more +7 moreExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the...7.5 High
- exagrid ex10000e firmware, ex13000e firmware, ex21000e firmware +5 more +7 moreExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the...9.8 Critical
- grandstream waveThe Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving...7.8 High
- grandstream waveThe com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android...5.9 Medium
- grandstream waveThe auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and...8.1 High
- jetstarJetstar App for iOS before 3.0.0 does not verify X.509 certificates from SSL servers, which...5.9 Medium
- the hyakugo bank 105 bankThe 105 BANK app 1.0 and 1.1 for Android and 1.0 for iOS does not verify X.509 certificates from...5.9 Medium
- Show moreLoading…