CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- oracle fusion middleware mapviewerVulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware ...8.6 High
- nvidia video driver, shield tablet firmware, shield tablet tk1 firmware +1 more +3 moreBuffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3,...7.8 High
- nvidia video driver, shield tablet firmware, shield tablet tk1 firmware +1 more +3 moreInteger overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3...7.8 High
- lshell project lshelllshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute...9.9 Critical
- lshell project lshelllshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute...9.9 Critical
- oracle solaris clusterVulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent...2.8 Low
- pivotal software cloud foundry, cloud foundry elastic runtime, cloud foundry uaa +1 more +3 moreCloud Foundry vulnerable to Improper Certificate Validation5.9 Medium
- apple safariWebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process...8.8 High
- apple quicktimeBuffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute...9.8 Critical
- apple iphone osFind My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for...4.8 Medium
- mybbIn MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.5.3 Medium
- mybbIn MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover...6.1 Medium
- s9y serendipityStored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other...5.4 Medium
- s9y serendipityThere is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.8.8 High
- artistscope copysafe web protectionThere is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers...6.5 Medium
- browserweb inc whizzThere is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any...8.1 High
- e107e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and...6.5 Medium
- wp-ecommerce easy wp smtpXSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.6.1 Medium
- netiq access managerAn XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because...6.1 Medium
- juniper northstar controller, juniper networks northstar controller application +1 moreA denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to...5.5 Medium
- kallithea-scm kallitheaKallithea Routes CSRF Bypass8.8 High
- kallitheaKallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or...6.5 Medium
- yeager cmsMultiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote...7.2 High
- yeager cmsSQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users...8.8 High
- yeager cmsSQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote...9.8 Critical
- d-link dvg-n5402sp firmwareD-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames,...9.8 Critical
- d-link dvg-n5402sp firmwareD-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of...9.8 Critical
- d-link dvg-n5402sp firmwareDirectory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or...7.5 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for...6.1 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAn insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux,...6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient consistency checks in signature handling in the networking stack in Google Chrome...6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreLack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81...4.7 Medium
- google chromeIncorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac,...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac...5.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac,...6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreType confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and...8.8 High
- google chromeA use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreType confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and...8.8 High
- opendaylightOpenDaylight Controller DoS7.5 High
- opendaylightOpenDaylight NULL Pointer Dereference5.3 Medium
- opendaylightJava out of memory error and significant increase in resource consumption. Component:...5.3 Medium
- opendaylightController throws an exception and does not allow user to add subsequent flow for a particular...6.5 Medium
- opendaylightDenial of Service attack when the switch rejects to receive packets from the controller....7.5 High
- juniper junos, juniper networks junos os on m/mx platforms where enhanced subscriber management for dhcpv6 subscribers is configured +1 moreOn Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX...5.3 Medium
- juniper northstar controller, juniper networks northstar controller application +1 moreAn information leak vulnerability in Juniper Networks NorthStar Controller Application prior to...7.5 High
- juniper northstar controller, juniper networks northstar controller application +1 moreA persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application...6.5 Medium
- juniper northstar controller, juniper networks northstar controller application +1 moreAn insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application...8.8 High
- juniper northstar controller, juniper networks northstar controller application +1 moreA firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to...7.3 High
- Show moreLoading…