Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2017
April

CVEs published in April 2017

1,561 vulnerabilities, 194 critical, 7 exploited.

Known exploitedIn KEVPublic exploitFix available

trendmicro threat discovery appliancedetected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier...CVE-2016-85868.8 HighApril 28, 2017
trendmicro threat discovery applianceadmin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote...CVE-2016-85858.8 HighApril 28, 2017
trendmicro threat discovery applianceTrend Micro Threat Discovery Appliance 2.6.1062r1 and earlier uses predictable session values,...CVE-2016-85849.8 CriticalApril 28, 2017
ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request...CVE-2017-11948.8 HighApril 28, 2017
ibm insights foundation for energyIBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain...CVE-2017-11414.3 MediumApril 28, 2017
vivaldi installer for windowsUntrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48...CVE-2017-21567.8 HighApril 28, 2017
i.con corporation hoozin viewerBuffer overflow in Hoozin Viewer 2, 3, 4.1.5.15 and earlier, 5.1.2.13 and earlier, and 6.0.3.09...CVE-2017-21558.8 HighApril 28, 2017
justsystems hanako, hanako police, hanako pro +6 more +8 moreUntrusted search path vulnerability in Hanako 2017, Hanako 2016, Hanako 2015, Hanako Pro 3, JUST...CVE-2017-21547.8 HighApril 28, 2017
internet initiative japan inc. seil/b1, seil/bpv4, seil/x1 +7 more +9 moreSEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62,...CVE-2017-21537.5 HighApril 28, 2017
buffalo inc. wnc01wh, buffalo inc wnc01wh firmware +1 moreWNC01WH firmware 1.0.0.9 and earlier allows authenticated attackers to execute arbitrary OS...CVE-2017-21526.8 MediumApril 28, 2017
booking calendar project calendar, wpdevelop booking calendar +1 moreCross-site scripting vulnerability in Booking Calendar version 7.1 and earlier allows remote...CVE-2017-21516.1 MediumApril 28, 2017
booking calendar project calendar, wpdevelop booking calendar +1 moreDirectory traversal vulnerability in Booking Calendar version 7.0 and earlier allows remote...CVE-2017-21505.3 MediumApril 28, 2017
toshiba flashair, toshiba corporation installer for sdhc memory card with embedded transferjettm functionality configuration software, installer for sdhc memory card with embedded transferjettm functionality software update tool +5 more +7 moreUntrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with...CVE-2017-21498.8 HighApril 28, 2017
i-o data device, inc. wn-ac1167gr, iodata wn-ac1167gr firmware +1 moreCross-site scripting vulnerability in WN-AC1167GR firmware version 1.04 and earlier allows remote...CVE-2017-21485.4 MediumApril 28, 2017
veronalabs wp statistics, wp statistics statistics +1 moreCross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote...CVE-2017-21476.1 MediumApril 28, 2017
frogman office inc. cs-cart japanese edition, cs-cart multivendor japanese edition +1 moreCS-Cart Japanese Edition v4.3.10-jp-1 and earlier, CS-Cart Multivendor Japanese Edition v4.3.10...CVE-2017-21435.3 MediumApril 28, 2017
i-o data device, inc. wn-g300r3, iodata wn-g300r3 firmware +1 moreBuffer overflow in WN-G300R3 firmware Ver.1.03 and earlier allows remote attackers to execute...CVE-2017-21429.8 CriticalApril 28, 2017
i-o data device, inc. wn-g300r3, iodata wn-g300r3 firmware +1 moreWN-G300R3 firmware 1.03 and earlier allows attackers with administrator rights to execute...CVE-2017-21417.2 HighApril 28, 2017
gaku tablacus explorerTablacus Explorer 17.3.30 and earlier allows arbitrary scripts to be executed in the context of...CVE-2017-21408.8 HighApril 28, 2017
frogman office inc. cs-cart japanese edition, cs-cart multivendor japanese edition, frogman office inc cs-cart +2 moreCS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese...CVE-2017-21395.3 MediumApril 28, 2017
netgear prosafe plus configuration utilityProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access...CVE-2017-21373.7 LowApril 28, 2017
veronalabs wp statistics, wp statistics statistics +1 moreCross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote...CVE-2017-21366.1 MediumApril 28, 2017
veronalabs wp statistics, wp statistics statistics +1 moreCross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote...CVE-2017-21356.1 MediumApril 28, 2017
uchida assetbaseCross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows remote attackers to inject...CVE-2017-21346.1 MediumApril 28, 2017
securebrain phishwall client, securebrain corporation the installer of phishwall client internet explorer version +1 moreUntrusted search path vulnerability in the installer of PhishWall Client Internet Explorer...CVE-2017-21307.8 HighApril 28, 2017
information-technology promotion agency, japan (ipa) security guide for website operators, information-technology promotion agency introduction to safe website operation +1 moreSecurity guide for website operators allows remote attackers to execute arbitrary OS commands via...CVE-2017-21288.8 HighApril 28, 2017
yop poll, yop-poll yop poll +1 moreCross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to...CVE-2017-21275.4 MediumApril 28, 2017
allied telesis k.k. centrecom, centrecom ar260s v2 firmware +1 morePrivilege escalation vulnerability in CentreCOM AR260S V2 remote authenticated attackers to gain...CVE-2017-21258.8 HighApril 28, 2017
onethird cms, spiqe software onethird cms +1 moreCross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote...CVE-2017-21246.1 MediumApril 28, 2017
onethird cms, spiqe software onethird cms +1 moreCross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote...CVE-2017-21236.1 MediumApril 28, 2017
wbce cmsSQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator...CVE-2017-21207.2 HighApril 28, 2017
wbce cmsDirectory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read...CVE-2017-21198.6 HighApril 28, 2017
wbce cmsCross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to...CVE-2017-21186.1 MediumApril 28, 2017
cubecartDirectory traversal vulnerability in CubeCart versions prior to 6.1.5 allows attacker with...CVE-2017-21174.9 MediumApril 28, 2017
cybozu office, cybozu, inc. cybozu office +1 moreCybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction...CVE-2017-21164.3 MediumApril 28, 2017
cybozu office, cybozu, inc. cybozu office +1 moreCybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction...CVE-2017-21154.3 MediumApril 28, 2017
cybozu office, cybozu, inc. cybozu office +1 moreCross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated...CVE-2017-21145.4 MediumApril 28, 2017
i-o data device, inc. ts-ptcam/poe, ts-wlc2, ts-wlce +10 more +12 moreBuffer overflow in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00,...CVE-2017-21138.8 HighApril 28, 2017
i-o data device, inc. ts-ptcam/poe, ts-wlc2, ts-wlce +10 more +12 moreTS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2 firmware version 1.00, TS-WLCE firmware...CVE-2017-21128.8 HighApril 28, 2017
i-o data device, inc. ts-ptcam/poe, ts-wlc2, ts-wlce +10 more +12 moreHTTP header injection vulnerability in TS-WPTCAM firmware version 1.18 and earlier, TS-WPTCAM2...CVE-2017-21116.1 MediumApril 28, 2017
nissan securities co., ltd. access cx app for android, nissan securities access cx, nissan securities co., ltd. access cx app for ios +2 moreThe Access CX App for Android prior to 2.0.0.1 and for iOS prior to 2.0.2 does not verify X.509...CVE-2017-21105.9 MediumApril 28, 2017
cybozu kunai, cybozu, inc. cybozu kunai for android +1 moreCybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information...CVE-2017-21092.5 LowApril 28, 2017
softbank primedrive desktop applicationUntrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows...CVE-2017-21087.8 HighApril 28, 2017
akky 7-zip32.dll, self-extracting archive files created by 7-zip32.dll +1 moreUntrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22...CVE-2017-21077.8 HighApril 28, 2017
webminMultiple cross-site scripting vulnerabilities in Webmin versions prior to 1.830 allows remote...CVE-2017-21066.1 MediumApril 28, 2017
presentcast inc. tver app for android, presentcast inc tver +1 moreThe TVer App for Android 3.2.7 and earlier does not verify X.509 certificates from SSL servers,...CVE-2017-21055.9 MediumApril 28, 2017
k-opticom corporation business lala call app for android, business lala call +1 moreThe Business LaLa Call App for Android 1.4.7 and earlier does not verify X.509 certificates from...CVE-2017-21045.9 MediumApril 28, 2017
k-opticom corporation lala call app for android, lala call +1 moreThe LaLa Call App for Android 2.4.7 and earlier does not verify X.509 certificates from SSL...CVE-2017-21035.9 MediumApril 28, 2017
information-technology promotion agency, japan (ipa) hands-on vulnerability learning tool "appgoat" for web application, ipa appgoat +1 moreCross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool "AppGoat"...CVE-2017-21028.8 HighApril 28, 2017
information-technology promotion agency, japan (ipa) hands-on vulnerability learning tool "appgoat" for web application, ipa appgoat +1 moreHands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows...CVE-2017-21017.3 HighApril 28, 2017
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open