CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- genixcmsGeniXCMS Cross-site Scripting (XSS)5.4 Medium
- f5 enterprise manager, iworkflow, big-ip access policy manager +20 more +22 moreAn attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in...7.5 High
- kmc information systems caseawareAn issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user...6.1 Medium
- craftcms craft cmsCraft CMS subject to URL forgery5.3 Medium
- craftcms craft cmsCraft CMS XSS Vulnerability6.1 Medium
- craftcms craft cmsCraft CMS Unauthorized View5.3 Medium
- podofo project podofoHeap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo...9.8 Critical
- underbit mad libmadThe mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to...5.5 Medium
- underbit mad libmadThe mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to...7.8 High
- underbit mad libmadThe mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted,...4.7 Medium
- bose soundtouch 30The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4...9.1 Critical
- telegram desktop desktopTelegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local...5.5 Medium