CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- debian linux, long range zip project range zip +1 moreThe read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a...7.8 High
- long range zip project range zipThe join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to...5.5 Medium
- long range zip project range zipThe bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote...5.5 Medium
- zen-cart zen cartZen Cart 1.6.0 has XSS in the main_page parameter to index.php. NOTE: 1.6.0 is not an official...6.1 Medium
- allen disk project diskAllen Disk 1.6 has XSS in the id parameter to downfile.php.6.1 Medium
- genixcmsGeniXCMS Arbitrary User Password Reset Vulnerability9.1 Critical
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel...6.4 Medium
- imagemagickIn ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a...6.5 Medium
- debian lintianDeserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code...7.8 High
- gnu glibc** DISPUTED ** The xdr_bytes and xdr_string functions in the GNU C Library (aka glibc or libc6) 2...7.5 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreIncorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac,...7.5 High
- cookie project cookieImproper Input Validation in cookie7.5 High
- ca client automationThe OS Installation Management component in CA Client Automation r12.9, r14.0, and r14.0 SP1...5.5 Medium
- advantech webaccessAn Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The...7.1 High
- dahuasecurity dh-hcvr4xxx firmware, dh-hcvr5xxx firmware, dh-ipc-hdbw13a0sn firmware +12 more +14 moreA Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH...7.3 High
- dahuasecurity dh-hcvr4xxx firmware, dh-hcvr5xxx firmware, dh-ipc-hdbw13a0sn firmware +12 more +14 moreA Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC...9.8 Critical
- hikvision ds-2cd2032-i firmware, ds-2cd2112-i firmware, ds-2cd2132-i firmware +55 more +57 moreA Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0...8.8 High
- hikvision ds-2cd2032-i firmware, ds-2cd2112-i firmware, ds-2cd2132-i firmware +56 more +58 moreAn Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build...9.8 Critical
- cybervision kaa iot platformA Code Injection issue was discovered in CyberVision Kaa IoT Platform, Version 0.7.4. An...8.8 High
- advantech b\+b smartworx mesr901 firmwareA Use of Client-Side Authentication issue was discovered in Advantech B+B SmartWorx MESR901...9.8 Critical
- certec edv gmbh atvise scadaA Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An ...8.8 High
- certec edv gmbh atvise scadaA Cross-Site Scripting issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0....5.4 Medium
- rockwellautomation compactlogix 5380 firmware, controllogix 5580 firmware +1 moreA Resource Exhaustion issue was discovered in Rockwell Automation ControlLogix 5580 controllers...5.9 Medium
- citrix xenmobile server** DISPUTED ** Citrix XenMobile Server before 10.5.0.24 allows man-in-the-middle attackers to...5.3 Medium
- trendmicro officescanTrend Micro OfficeScan 11.0 before SP1 CP 6325 (with Agent Module Build before 6152) and XG...6.1 Medium
- ibm websphere portalIBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using...8.8 High
- ibm websphere cast iron solution, ibm corporation websphere cast iron cloud integration +1 moreIBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction...8.6 High
- ibm websphere cast iron solution, ibm corporation websphere cast iron cloud integration +1 moreIBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused...8.6 High
- ibm tivoli storage managerIBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that...5.5 Medium
- ibm marketing platformIBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by...6.1 Medium
- irodsUntrusted input execution via igetwild in all iRODS versions before 4.1.11 and 4.2.1 allows other...9.8 Critical
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. Because...9.8 Critical
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos...6.1 Medium
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular...10.0 Critical
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. By sending a POST request...8.8 High
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in home/seos...6.1 Medium
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a home/seos...6.1 Medium
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. The home/seos/courier...9.8 Critical
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. A report_error.php?year=...9.8 Critical
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. There is a CRLF...6.1 Medium
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. There is XSS in courier...6.1 Medium
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. courier/1000@/oauth...6.1 Medium
- accellion file transfer applianceAn issue was discovered on Accellion FTA devices before FTA_9_12_180. seos/1000/find.api allows...9.8 Critical
- atlassian hipchat serverAtlassian Hipchat Server before 2.2.4 allows remote authenticated users with user level...8.8 High
- xirrus arrayosSQL injection vulnerability in ArrayOS before AG 9.4.0.135, when the portal bookmark function is...8.8 High
- podofo project podofoThe PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base...8.8 High
- watchguard panda mobile securityAcceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows...5.9 Medium
- foxitsoftware foxit pdfAcceptance of invalid/self-signed TLS certificates in "Foxit PDF - PDF reader, editor, form,...8.1 High
- atlassian hipchatAcceptance of invalid/self-signed TLS certificates in Atlassian HipChat before 3.16.2 for iOS...5.9 Medium
- 21st century insurance century insuranceThe 21st Century Insurance app 10.0.0 for iOS does not verify X.509 certificates from SSL servers...5.9 Medium
- Show moreLoading…