CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- siemens simatic wincc, simatic wincc runtime, simatic wincc \(tia portal\) +2 moreA vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1),...4.9 Medium
- siemens pcs 7, primary setup tool (pst), primary setup tool +28 more +30 moreA vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1),...6.5 Medium
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +199 more +201 moreSpecially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected...7.1 High
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +229 more +231 moreSpecially crafted PROFINET DCP broadcast packets could cause a denial of service condition of...7.1 High
- veritas backup execIn Veritas Backup Exec 2014 before build 14.1.1187.1126, 15 before build 14.2.1180.3160, and 16...9.8 Critical
- opentext tempo boxCross-site scripting (XSS) vulnerability in OpenText Tempo Box 10.0.3 allows remote attackers to...6.1 Medium
- sap sapcarSAP SAPCAR 721.510 has a Heap Based Buffer Overflow Vulnerability. It could be exploited with a...7.8 High
- dropbox leptonDropbox Lepton 1.2.1 allows DoS (SEGV and application crash) via a malformed lepton file because...5.5 Medium
- blackberry bes12, unified endpoint manager, enterprise service +2 moreA stored cross site scripting vulnerability in the Management Console of BlackBerry Unified...6.1 Medium
- dolibarr erp\/crmDolibarr allows password changes without supplying the current password6.8 Medium
- dolibarr erp\/crmDolibarr ERP and CRM Insecure Encryption9.8 Critical
- dolibarr erp\/crmDolibarr ERP and CRM contain XSS Vulnerability6.1 Medium
- dolibarr erp\/crmDolibarr SQL Injection in doli/theme/eldy/style.css.php via the lang parameter9.8 Critical
- swftoolsA Use After Free in the pdf2swf part of swftools 0.9.2 and earlier allows remote attackers to...7.8 High
- vmware airwatch inbox, airwatch console, airwatch agent +2 moreAirwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the...3.8 Low
- vmware airwatch agent, airwatch inbox +1 moreAirwatch Agent for Android contains a vulnerability that may allow a device to bypass root...8.8 High
- ibm websphere application serverIBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security. A...8.1 High
- ibm rational collaborative lifecycle management, rational quality manager, rational team concert +2 moreIBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity...8.1 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user...7.5 High
- ibm rational team concert, rational collaborative lifecycle management, rational quality manager +2 moreIBM Rational Team Concert (RTC) is vulnerable to HTML injection. A remote attacker with project...4.8 Medium
- ibm rational quality manager, rational collaborative lifecycle management, rational team concert +2 moreIBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm interactIBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site request forgery which could...8.8 High
- ibm interactIBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- openstack magnumOpenstack Magnum Unsafe Credential Handling9.8 Critical
- asus rt-ac1750 firmwareASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow remote authenticated...6.5 Medium
- asus rt-ac1750 firmwareASUS RT-AC* and RT-N* devices with firmware through 3.0.0.4.380.7378 allow JSONP Information...6.5 Medium
- getsymphony symphonySymphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content...6.1 Medium
- codection clean loginCSRF in the Clean Login plugin before 1.8 for WordPress allows remote attackers to change the...6.5 Medium
- acquia mauticMautic Cross-Site Request Forgery (CSRF)8.8 High
- xmlsoft libxml2The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a...9.1 Critical
- flatcore flatcore-cmsacp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the...7.5 High
- asus rt-ac1750 firmwareASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 allow JSONP Information...7.5 High
- asus rt-ac1750 firmwareASUS RT-AC* and RT-N* devices with firmware before 3.0.0.4.380.7378 have Login Page CSRF and Save...8.8 High
tomcat7Debiantomcat7 - regression updateNo score- debian linux, linux kernel +1 moreThe inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4...7.8 High
- miniupnp project miniupnpdInteger signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers...9.8 Critical
- kde kauth, kdelibs +1 moreKDE kdelibs before 4.14.32 and KAuth before 5.34 allow local users to gain root privileges by...7.8 High
- git git-shell, canonical ubuntu linux, debian linux +2 more +4 moregit-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x...8.8 High
- libtiffThe TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows...5.5 Medium
- veritas netbackup applianceIn Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary...9.8 Critical
- veritas netbackup, netbackup appliance +1 moreIn Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is...9.8 Critical
- veritas netbackup, netbackup appliance +1 moreIn Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is...9.8 Critical
- veritas netbackup, netbackup appliance +1 moreIn Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is...9.8 Critical
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...4.7 Medium
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- nvidia gpu display driver, gpu driver +1 moreAll versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode...7.8 High
- Show moreLoading…