CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- banco de costa rica bcr movilThe Banco de Costa Rica BCR Movil app 3.7 for iOS does not verify X.509 certificates from SSL...5.9 Medium
- america\'s first federal credit union first fcu mobile bankingThe America's First Federal Credit Union (FCU) Mobile Banking app 3.1.0 for iOS does not verify X...5.9 Medium
- emirates nbd bank p.j.s.c nbd, nbd ksa +1 moreThe Emirates NBD Bank P.J.S.C Emirates NBD KSA app 3.10.0 through 3.10.4 (UAE) and 2.0.1 through...5.9 Medium
- dotit-corp banque zitounaThe DOT IT Banque Zitouna app 2.1 for iOS does not verify X.509 certificates from SSL servers,...5.9 Medium
- forex tradeking forexThe TradeKing Forex for iPhone app 1.2.1 for iOS does not verify X.509 certificates from SSL...5.9 Medium
- forex forextraderThe FOREX.com FOREXTrader for iPhone app 2.9.12 through 2.9.14 for iOS does not verify X.509...5.9 Medium
- banco santander mexico sa supermovilThe Banco Santander Mexico SA Supermovil app 3.5 through 3.7 for iOS does not verify X.509...5.9 Medium
- electronic funds source llc efs mobile driver sourceThe Electronic Funds Source (EFS) Mobile Driver Source app 2.5 for iOS does not verify X.509...5.9 Medium
- great southern bank southern mobile bankingThe Great Southern Bank Great Southern Mobile Banking app before 4.0.4 for iOS does not verify X...5.9 Medium
- everyday health inc diabetes in check\The Everyday Health Diabetes in Check: Blood Glucose & Carb Tracker app 3.4.2 for iOS does not...5.9 Medium
- dollar bank mobileThe Dollar Bank Mobile app 2.6.3 for iOS does not verify X.509 certificates from SSL servers,...5.9 Medium
- payquicker mypayquickerThe PayQuicker app 1.0.0 for iOS does not verify X.509 certificates from SSL servers, which...5.9 Medium
- state bank of india bank anywhereThe State Bank of India State Bank Anywhere app 5.1.0 for iOS does not verify X.509 certificates...5.9 Medium
- think mutual bank mobile banking appThe Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from...5.9 Medium
- sccu space coast credit unionThe Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X...5.9 Medium
- pcre pcre2pcre2test.c in PCRE2 10.23 allows remote attackers to cause a denial of service (heap-based...9.8 Critical
- atlassian sourcetreeAtlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the...9.8 Critical
- openssl, hp operations agent +1 moreEncrypt-Then-Mac renegotiation crash7.5 High
- openssl, oracle agile engineering data management, communications application session controller +4 more +6 moreBad (EC)DHE parameters cause a client crash7.5 High
- opensslChaCha20/Poly1305 heap-buffer-overflow7.5 High
- opensslCMS Null dereference7.5 High
- gitlabGitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element...6.1 Medium
- genixcmsGeniXCMS Cross-site Scripting4.8 Medium
- wordpressWordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which...5.9 Medium
- dell emc data domain osEMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a...6.7 Medium
- [unknown] nss, mozilla network security services +1 morenss before version 3.30 is vulnerable to a remote denial of service during the session handshake...5.9 Medium
- quickheal antivirus pro, internet security, total security +2 moreQuick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal...7.5 High
- quickheal antivirus pro, internet security, total security +2 moreQuick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal...9.8 Critical
- quickheal antivirus pro, internet security, total security +2 moreQuick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal...9.8 Critical
- quickheal antivirus pro, internet security, total security +2 moreQuick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal...9.8 Critical
- telaxius epesiCross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI...6.1 Medium
- libtirpc project libtirpc, ntirpc project ntirpc, rpcbind project rpcbind +2 morerpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through...7.5 High
- imagemagickThe function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak...6.5 Medium
- genixcmsGeniXCMS Cross-site Scripting (XSS)5.4 Medium
- cisco unity connectionA vulnerability in the ImageID parameter of Cisco Unity Connection 10.5(2) could allow an...5.3 Medium
- cisco wide area application servicesA vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services ...6.8 Medium
- cisco unified contact center enterpriseA vulnerability in the Cisco Finesse Notification Service for Cisco Unified Contact Center...5.3 Medium
- cisco secure firewall threat defenseA "Cisco Firepower Threat Defense 6.0.0 through 6.2.2 and Cisco ASA with FirePOWER Module Denial...7.1 High
- cisco iosA vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an...5.3 Medium
- cisco small business rv series router firmwareA vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W...5.8 Medium
- vaultive office 365 securityPGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or...9.1 Critical
- trendmicro officescanTrend Micro OfficeScan 11.0 before SP1 CP 6325 and XG before CP 1352 allows remote authenticated...8.8 High
- ibm maximo asset management, maximo asset management essentials +1 moreIBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary...8.4 High
- hcl software bigfix remote controlIBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an...7.5 High
- ibm tealeaf consumer experience, tealeaf customer experience +1 moreThe IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational...4.0 Medium
- rapid7 appspider proEditions of Rapid7 AppSpider Pro prior to version 6.14.060 contain a heap-based buffer overflow...7.5 High
- rapid7 appspider proEditions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading...7.8 High
- brave** DISPUTED ** Brave 0.12.4 has a Status Bar Obfuscation issue in which a redirection target is...6.5 Medium
- braveBrave 0.12.4 has a URI Obfuscation issue in which a string such as https://safe.example.com...6.5 Medium
- rust-base64 project rust-base64Integer overflow in base649.8 Critical
- Show moreLoading…