CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- intel solid state drive toolbox There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions... 6.7 Medium
- vmware horizon daas VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient... 5.5 Medium
- allen disk project disk SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to... 6.5 Medium
- syspass inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as... 6.1 Medium
- tiki tikiwiki cms\/groupware lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to... 6.1 Medium
- virustotal yara libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of... 7.5 High
- libming The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote... 6.5 Medium
- pivotx PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors... 8.8 High
-
tiffUbuntu tiff regression No score - juniper junos space On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with... 5.3 Medium
- juniper junos space A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space... 5.3 Medium
- juniper junos space On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is... 5.9 Medium
- juniper junos space An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to... 6.5 Medium
- juniper junos space A reflected cross site scripting vulnerability in the administrative interface of Juniper... 6.1 Medium
- juniper junos space On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization... 8.8 High
- juniper junos space On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization... 8.8 High
- juniper junos, juniper networks junos os running on qfx3500, qfx3600, qfx5100, qfx5200, ex4300, ex4600 devices +1 more Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS... 7.5 High
- juniper junos, juniper networks junos os where rip is enabled +1 more On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47... 7.5 High
- juniper junos, juniper networks junos os where the bgp add-path feature is enabled with 'send' option or with both 'send' and 'receive' options +1 more On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47... 7.5 High
- juniper junos, juniper networks junos os with dhcpv6 enabled +1 more On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46... 7.5 High
- juniper junos, juniper networks junos os on srx series services gateways chassis cluster +1 more On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior... 7.5 High
- apache hive org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation 7.5 High
- strongswan The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin... 7.5 High
- strongswan, canonical ubuntu linux, debian linux +2 more The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before... 7.5 High
- freedesktop poppler poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite... 5.5 Medium
- mozilla nss, network security services +1 more Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty... 7.5 High
- sudo project sudo Todd Miller's sudo version 1.8.20 and earlier is vulnerable to an input validation (embedded... 6.4 Medium
- laravel Laravel does not properly constrain the host portion of a password-reset URL 6.1 Medium
- realnetworks realplayer RealPlayer 16.0.2.32 allows remote attackers to cause a denial of service (divide-by-zero error... 5.5 Medium
- videolan vlc media player plugins\audio_filter\libmpgatofixed32_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote... 7.8 High
- videolan vlc media player plugins\codec\libflac_plugin.dll in VideoLAN VLC media player 2.2.4 allows remote attackers to... 7.8 High
- otrs Open Ticket Request System (OTRS) 3.3.9 has XSS in index.pl?Action=AgentStats requests, as... 6.1 Medium
- virtuemart The VirtueMart com_virtuemart component 3.0.14 for Joomla! allows SQL injection by remote... 7.2 High
- e107 e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter... 7.2 High
- hitachi device manager Cross-site scripting vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi... 5.4 Medium
- hitachi device manager Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to... 6.1 Medium
- hitachi device manager Open Redirect vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Tuning Manager... 6.1 Medium
- hitachi device manager XXE vulnerability in Hitachi Device Manager before 8.5.2-01 and Hitachi Replication Manager... 6.5 Medium
- hitachi device manager RMI vulnerability in Hitachi Device Manager before 8.5.2-01 allows remote attackers to execute... 9.8 Critical
- lansweeper Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782. 6.1 Medium
- note project note Bram Korsten Note through 1.2.0 is vulnerable to a reflected XSS in note-source\ui\editor.php ... 6.1 Medium
- raygun raygun4wp The Raygun4WP plugin 1.8.0 for WordPress is vulnerable to a reflected XSS in sendtesterror.php ... 6.1 Medium
- moxa oncell 5004-hspa firmware, oncell 5104-hsdpa firmware, oncell 5104-hspa firmware +3 more +5 more A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build... 8.8 High
- moxa oncell 5004-hspa firmware, oncell 5104-hsdpa firmware, oncell 5104-hspa firmware +3 more +5 more An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell... 9.8 Critical
- moxa oncell 5004-hspa firmware, oncell 5104-hsdpa firmware, oncell 5104-hspa firmware +3 more +5 more A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3... 9.8 Critical
- openvswitch In lib/conntrack.c in the firewall implementation in Open vSwitch (OvS) 2.6.1, there is a buffer... 9.8 Critical
- openvswitch In Open vSwitch (OvS) 2.5.0, a malformed IP packet can cause the switch to read past the end of... 8.8 High
- No product listed bpo-30500: urllib connects to a wrong host No score
- openldap, debian linux, mcafee policy auditor +7 more +9 more servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free... 6.5 Medium
- openvswitch In Open vSwitch (OvS) v2.7.0, there is a buffer over-read while parsing the group mod OpenFlow... 9.8 Critical
- Show olderLoading…