CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.0 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- wolfsslwolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.7.5 High
- wolfsslwolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka...7.8 High
- tibco spotfire analytics platform for aws, spotfire server, tibco software inc. spotfire analytics platform for aws marketplace +2 moreTIBCO Spotfire injection vulnerabilities4.3 Medium
- schneider electric vampsetAll versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are...5.5 Medium
- fiyo cmsFiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller...7.5 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free...8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free...8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...8.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux +2 more +4 moreAdobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption...8.8 High
- adobe experience manager formsAdobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...5.9 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established...5.3 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript...6.1 Medium
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreIn F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreIn F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreIn F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation...8.8 High
- apache cordova, apache software foundation cordova android +1 moreInformation Exposure in cordova-android7.5 High
- microsoft malware protection engine, forefront security, windows defender +2 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...7.8 High
- xenXen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest...8.8 High
- xenXen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer...8.8 High
- xenXen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might...8.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer...7.8 High
- emc mainframe enablers resourcepak baseEMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a...9.8 Critical
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and...3.5 Low
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public...4.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library...5.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an...3.5 Low
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of...5.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS...5.4 Medium
- brocade netiron cer series firmware, netiron ces series firmware, netiron mlx series firmware +2 more +4 moreImproper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later...7.5 High
- broadcom fabric operating system, brocade communications systems, inc. fibre channel san products running brocade fabric os (fos). +1 moreA privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric...8.8 High
- lxterminal project lxterminalunixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local...7.8 High
- allen disk project diskAllen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.6.5 Medium
- gemalto smartdiag diagnosis toolGemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via...7.8 High
- blftech visualview hmiAn Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9...7.0 High
- libetpan project libetpanA null dereference vulnerability has been found in the MIME handling component of LibEtPan before...7.5 High
- long range zip project range zipThe bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote...5.5 Medium
- debian linux, long range zip project range zip +1 moreThe read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to...5.5 Medium
- long range zip project range zipThe lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote...5.5 Medium
- Show moreLoading…