CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- cisco telepresence, telepresence ce, telepresence tc +2 moreA vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration...7.5 High
- flexera software llc flexnet manager suiteAn error when handling certain external commands and services related to the FlexNet Inventory...9.8 Critical
- eir d1000 modem firmwareThe Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreA time-of-check time-of-use race condition could potentially exist in the secure file system in...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone access control policy may potentially be bypassed in all Android releases from CAF...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn QSEE in all Android releases from CAF using the Linux kernel access control may potentially be...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIf shared content protection memory were passed as the secure camera memory buffer by the HLOS to...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an information exposure vulnerability can potentially occur in all Android releases...5.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an integer overflow vulnerability can potentially occur in all Android releases from...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a time-of-check time-of-use race condition could potentially exist in a listener...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an integer overflow vulnerability can potentially occur in all Android releases from...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone a time-of-check time-of-use race condition could potentially exist in an...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreA PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreDue to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn TrustZone, an integer overflow vulnerability can potentially occur in all Android releases...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreA buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can...7.8 High
- admidioadmidio CSRF Vulnerability4.5 Medium
- infor enterprise asset managementINFOR EAM V11.0 Build 201410 has XSS via comment fields.5.4 Medium
- infor enterprise asset managementINFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue...8.8 High
- deluge-torrent delugeThe WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability...9.8 Critical
- librawA boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw...7.8 High
- librawAn error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions...9.8 Critical
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an...6.5 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack...4.3 Medium
- ibm distributed marketingIBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to...2.7 Low
- puma pumatracThe PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which...5.9 Medium
- yottamark inc. shopwell - healthy diet \& grocery food scannerThe YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does...5.9 Medium
- interval international internationalThe Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from...5.9 Medium
- zipongo inc. healthy recipes and grocery dealsThe Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509...5.9 Medium
- warnerbros ellentubeThe Warner Bros. ellentube app 3.1.1 through 3.1.3 for iOS does not verify X.509 certificates...5.9 Medium
- radiojavan radio javanThe Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL...5.9 Medium
- life before us yo.The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers,...5.9 Medium
- changyou dolphin web browserThe MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS...5.9 Medium
- gocivix indiana votersThe Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509...5.9 Medium
- cgmlarson vizex readerBuffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or...7.8 High
- halliburton logview proBuffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service...7.8 High
- openvpnOpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via...7.5 High
- libraw libraw-demosaic-pack-gpl2A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a...9.8 Critical
- libraw libraw-demosaic-pack-gpl2An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw...9.8 Critical
- microsoft corporation chakra core, microsoft edge +1 moreChakraCore RCE Vulnerability9.8 Critical
- microsoft corporation chakra core, microsoft edge +1 moreChakraCore RCE Vulnerability9.8 Critical
- pcmanfm project pcmanfmPCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of...5.5 Medium
- libmenu-cache project libmenu-cacheLibmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a...3.3 Low
- Show moreLoading…