CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- moodleMoodle Cross-Site Request Forgery (CSRF)4.3 Medium
- moodleMoodle Unauthorized searching of arbitrary blogs by typing full url5.3 Medium
- moodleMoodle External blog editing takeover6.3 Medium
- apache ambariIn Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary...6.5 Medium
- apache qpid broker-jExposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java7.5 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control...10.0 Critical
- linux kernelfs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles...5.5 Medium
- simpleinvoices simple invoicesMultiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow...8.8 High
- virustotal yaraThe sized_string_cmp function in libyara/sizedstr.c in YARA 3.5.0 allows remote attackers to...7.5 High
- mailcow mailcow\mailcow 0.14, as used in "mailcow: dockerized" and other products, has CSRF.8.8 High
- debian linux, linux kernel +1 moreThe ipxitf_ioctl function in net/ipx/af_ipx.c in the Linux kernel through 4.11.1 mishandles...7.8 High
- apache ambariIn Ambari 2.4.x (before 2.4.3) and Ambari 2.5.0, an authorized user of the Ambari Hive View may...7.5 High
- phpThe zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent...9.8 Critical
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn function msm_pcm_playback_close() in all Android releases from CAF using the Linux kernel,...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn all Android releases from CAF using the Linux kernel, while processing a voice SVC request...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn core_info_read and inst_info_read in all Android releases from CAF using the Linux kernel,...7.0 High
- synology photo stationDirectory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226...7.5 High
- synology photo stationDirectory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology...7.1 High
- synology photo stationCommand injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows...9.8 Critical
- flightgearIn FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has...7.5 High
- red hat, inc. keycloak node.js adapter, keycloak keycloak-nodejs-auth-utils +1 morekeycloak-connect and keycloak-js improperly handle invalid tokens9.8 Critical
- softbank primedrive desktop application, softbank corporation installer for primedrive desktop application +1 moreUntrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4...7.8 High
- n-i-agroinformatics soy cms, nippon institute of agroinformatics ltd. soy cms with installer +1 moreCross-site scripting vulnerability in SOY CMS with installer 1.8.12 and earlier allows remote...6.1 Medium
- n-i-agroinformatics soy cmsDirectory traversal vulnerability in SOY CMS Ver.1.8.1 to Ver.1.8.12 allows authenticated...7.5 High
- jpki the public certification service for individuals, japan agency for local authority information systems installer for the public certification service for individuals "the jpki user's software (for windows 7 and later)", installer for the public certification service for individuals "the jpki user's software (for windows vista)" +1 more +3 moreUntrusted search path vulnerability in installers for The Public Certification Service for...7.3 High
- tenable nessusCross-site scripting vulnerability in Nessus versions 6.8.0, 6.8.1, 6.9.0, 6.9.1 and 6.9.2 allows...5.4 Medium
- basercms, basercms users community plugin uploader +1 moreCross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and...8.8 High
- basercms, basercms users community plugin mail +1 moreCross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and...8.8 High
- basercms, basercms users community plugin feed +1 moreCross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and...8.8 High
- basercms, basercms users community plugin blog +1 moreCross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and...8.8 High
- basercmsCross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers...5.4 Medium
- basercmsCross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows...8.8 High
- basercms, basercms users community plugin blog +1 moreCSRF in baserCMS 3.0.10 and earlier8.8 High
- basercms, basercms users community plugin blog +1 morebaserCMS Cross-site Scripting vulnerability5.4 Medium
- basercms, basercms mail, basercms users community plugin mail +2 moreCSRF in baserCMS 3.0.10 and earlier8.8 High
- basercmsbaserCMS Cross Site Request Forgery vulnerability8.8 High
- basercms, basercms mail, basercms users community plugin mail +2 moreCross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows...5.4 Medium
- basercmsCross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows...8.8 High
- dena h2oH2O versions 2.0.3 and earlier and 2.1.0-beta2 and earlier allows remote attackers to cause a...7.5 High
- splunk, splunk enterprise, splunk inc. light +2 moreOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.3, Splunk Enterprise 6.3.x...6.1 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreCross-site scripting vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6...4.8 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreOpen redirect vulnerability in Splunk Enterprise 6.4.x prior to 6.4.2, Splunk Enterprise 6.3.x...6.1 Medium
- splunk, splunk enterprise, splunk inc. light +2 moreCross-site scripting vulnerability in Splunk Enterprise 6.3.x prior to 6.3.5 and Splunk Light 6.3...4.8 Medium
- money foward, inc. forward, forward for sbi sumishin net bank, forward for shiga bank +15 more +17 moreThe Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1...5.5 Medium
- money foward, inc. forward, forward for sbi sumishin net bank, forward for shiga bank +15 more +17 moreThe Android Apps Money Forward (prior to v7.18.0), Money Forward for The Gunma Bank (prior to v1...7.8 High
- google androidA remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could...5.5 Medium
- linux kernelAn information disclosure vulnerability in the Synaptics touchscreen driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Qualcomm sound codec driver could enable a local...4.7 Medium
- google android, linux kernel +1 moreAn information disclosure vulnerability in the Qualcomm camera driver could enable a local...4.7 Medium
- Show moreLoading…