CVEs published in April 2017
1,561 vulnerabilities, 194 critical, 7 exploited.
- artifex ghostscript, debian linux, redhat enterprise linux desktop +5 more +7 moreArtifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via ...7.8 High
- freetypeFreeType 2 before 2017-03-26 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- wificam wireless ip camera \(p2p\) firmwareOn Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not...9.8 Critical
- wificam wireless ip camera \(p2p\) firmwareWireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with...9.8 Critical
- wificam wireless ip camera \(p2p\) firmwareOn Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554...7.5 High
- wificam wireless ip camera \(p2p\) firmwareWireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA...7.5 High
- wificam wireless ip camera \(p2p\) firmwareWireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud...7.5 High
- tp-link c20i firmware, c2 firmware +1 moreTP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow...9.9 Critical
- tp-link c20i firmware, c2 firmware +1 moreTP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow...6.5 Medium
- tp-link c20i firmware, c2 firmware +1 morevsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n...9.8 Critical
- tp-link c20i firmware, c2 firmware +1 moreTP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too...5.3 Medium
- modx revolutionDirectory traversal in setup/processors/url_search.php (aka the search page of an unused...5.3 Medium
- oracle one-to-one fulfillmentVulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite ...7.1 High
- oracle marketingVulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User...7.1 High
- oracle marketingVulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User...7.1 High
- oracle marketingVulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User...7.1 High
- oracle marketingVulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User...7.1 High
- oracle marketingVulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User...7.1 High
- joomla joomla\!In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on...5.3 Medium
- joomla joomla\!In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low...6.5 Medium
- joomla joomla\!In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows...5.3 Medium
- joomla joomla\!In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names...6.1 Medium
- joomla joomla\!In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes...6.1 Medium
- joomla joomla\!In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters...6.1 Medium
- joomla joomla\!In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the...6.1 Medium
- joomla joomla\!In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent using the JMail API leaked the used...5.3 Medium
- hcl software dominoIBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could...8.8 High
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an...8.1 High
- modified-shop modified ecommerce shopsoftwarewww.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht...10.0 Critical
- saltstack saltSaltStack Salt Information Exposure7.8 High
- oneplus oxygenosIn OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked...4.6 Medium
- mcafee virusscan enterpriseA memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8...4.3 Medium
- opentext documentum content serverOpenText Documentum Content Server has an inadequate protection mechanism against SQL injection,...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- google chromeAn integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux...8.8 High
- linux kernelHeap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel...7.0 High
- botan project botanA programming error exists in a way Randombit Botan cryptographic library version 2.0.1...6.5 Medium
- linux kernelThe handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows...5.5 Medium
- nvidia video driver, shield tablet firmware, shield tablet tk1 firmware +1 more +3 moreStack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV...7.8 High
- oracle glassfish serverVulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent:...3.1 Low
- oracle webcenter contentVulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent...8.2 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...10.0 Critical
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common...7.8 High
- oracle sun zfs storage appliance kit, oracle corporation sun zfs storage appliance kit (ak) software +1 moreVulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products...7.5 High
- oracle automatic service request, oracle corporation automatic service request (asr) +1 moreVulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools ...7.8 High
- oracle automatic service request, oracle corporation automatic service request (asr) +1 moreVulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools ...5.5 Medium
- oracle automatic service request, oracle corporation automatic service request (asr) +1 moreVulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools ...7.1 High
- Show moreLoading…