CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- libdwarf project libdwarfAn issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer...9.8 Critical
- libavlibav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in...9.8 Critical
- google i\/o 2017The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http...5.9 Medium
- whatsapp** DISPUTED ** Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for...4.6 Medium
- mikrotik routerosA vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to...7.5 High
- ipswitch moveit dmz, moveit transfer 2017 +1 moreIpswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection. The fixed...9.8 Critical
- gnu binutilsThe print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows...5.5 Medium
- gnu binutilsreadelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long"...7.8 High
- gnu binutilsreadelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which...7.8 High
- gnu binutilsGNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over...5.5 Medium
- gnu binutilsGNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer...5.5 Medium
- gnu binutilsGNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a...5.5 Medium
- gnu binutilsGNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over...5.5 Medium
- ytnef project ytnef, canonical ubuntu linux +1 moreIn libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect...9.8 Critical
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreOut-of-bounds read in nokogiri7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the...7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 morelibxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function...7.5 High
- xmlsoft libxml2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreA buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function...7.5 High
- joomla joomla\!SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary...9.8 Critical
- mcafee network data loss prevention (ndlp), network data loss prevention +1 moreUser Name Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows...5.3 Medium
- mcafee network data loss prevention (ndlp), network data loss prevention +1 moreWeb Server method disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x...5.3 Medium
- mcafee network data loss prevention (ndlp), network data loss prevention +1 moreClickjacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x...4.5 Medium
- mcafee network data loss prevention (ndlp), network data loss prevention +1 moreSession Side jacking vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9...8.0 High
- mcafee network data loss prevention (ndlp), network data loss prevention +1 moreBanner Disclosure in the server in McAfee Network Data Loss Prevention (NDLP) 9.3.x allows remote...5.3 Medium
- mcafee network data loss prevention (ndlp), network data loss prevention +1 morePrivilege Escalation vulnerability in the server in McAfee Network Data Loss Prevention (NDLP) 9...6.5 Medium
- mcafee network data loss prevention (ndlp), network data loss prevention +1 moreEmbedding Script (XSS) in HTTP Headers vulnerability in the server in McAfee Network Data Loss...6.1 Medium
- perltidy project perltidyperltidy through 20160302, as used by perlcritic, check-all-the-things, and other software,...5.5 Medium
- codextrous b2j contactThe Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a...7.5 High
- smb4k project smb4k, debian linux +1 moresmb4k before 2.0.1 allows local users to gain root privileges by leveraging failure to verify...7.8 High
- codextrous b2j contactThe Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows a rename...9.8 Critical
- codextrous b2j contactThe Codextrous B2J Contact (aka b2j_contact) extension before 2.1.13 for Joomla! allows...7.5 High
- synacor zimbra collaboration suiteMultiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Zimbra...8.8 High
- wow new media moodboard liteOpen redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite...6.1 Medium
- clickfraud-monitoring adsense-click-fraud-monitoring, phpwhois project phpwhois +1 moreCross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud...6.1 Medium
- hootoo trip mate 6 firmwareStack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and...9.8 Critical
- hootoo trip mate 6 firmwareHeap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and...6.5 Medium
shadowUbuntushadow regressionNo scoreshadowDebianshadow - regression updateNo score- qemu, debian linux +1 moreQuick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System(9pfs)...7.8 High
ghostscriptUbuntughostscript regressionNo score- authconfigAuthconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to...4.3 Medium
- apache cxf fedizCross-Site Request Forgery in Apache CXF Fediz8.8 High
- apache cxf fedizModerate severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, and org.apache.cxf.fediz:fediz-spring28.8 High
- cisco sourcefire snortCisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder...7.5 High
- cisco snort\+\+Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. Since valid ether...7.5 High
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to...7.5 High
- ribboncommunications edgemarc firmwareThe HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page...9.8 Critical
- cisco small business rv router firmware, small business rv router firmware 1.0 +1 moreA vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W...9.6 Critical
- cisco ios xrA vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow...7.5 High
- cisco aironet access point firmwareA vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800...7.5 High
- Show moreLoading…