CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- opsviewOpen redirect vulnerability in Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2...6.1 Medium
- opsviewIn Opsview Monitor Pro (Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051,...7.5 High
- proxmox mail gatewayOpen redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote...6.1 Medium
- proxmox mail gatewayMultiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8...6.1 Medium
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows...7.8 High
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows...8.8 High
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 8.2.1 and PhantomPDF before 8.2.1 have an out-of-bounds read that allows...8.8 High
- netiq imanagerNovell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a...9.8 Critical
- netiq imanagerNovell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have...8.8 High
- netiq imanagerNovell iManager 2.7.x before 2.7 SP7 Patch 10 HF1 and NetIQ iManager 3.x before 3.0.3.1 have a...6.1 Medium
- netiq imanagerNetIQ iManager 3.x before 3.0.3.1 has an issue in the renegotiation of connection parameters with...5.3 Medium
- qemu, debian linux, redhat openstack +2 moreMemory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows...6.5 Medium
- qemu, debian linux, redhat openstack +2 moreMemory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a...7.5 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious...7.8 High
- linux kernel, google android +1 morekernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows...7.8 High
- gnu binutilsThe function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka...5.5 Medium
- gnulibGnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The...9.8 Critical
- paloaltonetworks pan-osThe Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote...6.5 Medium
- lame project lameLAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header,...7.8 High
- rubocop project rubocopRuboCop gem Insecure use of /tmp3.3 Low
- rxvt project rxvt, debian linux +1 moreRxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a...7.5 High
- gfi kerio connect, kerio connect client +1 moreKerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and...6.5 Medium
- pexip infinityPexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart)...9.8 Critical
- hpe proliant ml10 gen9 server firmware, intel active management technology (amt), small business technology (sbt), and standard manageability, active management technology firmware +35 more +37 moreAn unprivileged network attacker could gain system privileges to provisioned Intel manageability...9.8 Critical
- advantech webaccessupAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated...4.9 Medium
- bmc server automationThe RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows...5.3 Medium
- pivotal software cloud foundry, cloud foundry elastic runtime +1 moreThe Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation,...9.8 Critical
- apache qpid protonThe C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on...5.9 Medium
- miniprofiler rack-mini-profilerrack-mini-profiler allows remote attackers to obtain sensitive information about allocated strings and objects5.3 Medium
- axis network camera firmwareThe devtools.sh script in AXIS network cameras allows remote authenticated users to execute...8.8 High
- xen, novell suse linux enterprise point of sale, suse linux enterprise server +3 more +5 moreXen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them,...3.8 Low
- [unknown] 389-ds-base, fedoraproject 389 directory server, redhat enterprise linux desktop +2 more +4 more389-ds-base before versions 1.3.5.17 and 1.3.6.10 is vulnerable to an invalid pointer dereference...6.5 Medium
- qemu, debian linux +1 morehw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause...6.5 Medium
- qemu, debian linux +1 moreMemory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator)...6.5 Medium
- linux kernel, google android +1 moreThe regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19...7.0 High
- 360fly 4k camera firmware360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by...8.8 High
- swftoolsIn SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function png_load() in lib...6.5 Medium
- swftoolsIn SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in...8.8 High
- franklinfueling ts-550 evo firmwareOn Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be...8.8 High
- franklinfueling ts-550 evo firmwareOn Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the...6.5 Medium
- pcre pcre2PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in...9.8 Critical
- gnu binutilsdwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is...7.5 High
- genixcmsGeniXCMS Mailbox validation logic vulnerability5.3 Medium
- genixcmsGeniXCMS SQL Injection8.8 High
- Show moreLoading…