CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- allen disk project diskreg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it...7.5 High
- playsmsPlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is...8.8 High
- schneider-electric wonderware indusoft web studioAn Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft...7.8 High
- emc isilon onefsEMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is...7.1 High
- rsa adaptive authentication \(on premise\)EMC RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) contains a fix...5.4 Medium
mhonarcMageiaUpdated mhonarc packages fix security vulnerabilityNo score- phoenix contact gmbh mguard firmwareAn Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions...4.0 Medium
- phoenix contact gmbh mguard firmwareA Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0...7.5 High
- schneider-electric wonderware historian clientAn Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware...6.6 Medium
- satel-iberia sennet multitask meter, sennet optimal datalogger, sennet solar datalogger +2 moreA Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity...8.8 High
- codesys web serverAn Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web...9.8 Critical
- codesys web serverA Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web...9.8 Critical
- leao consultoria e desenvolvimento de sistemas ltda me laquis scadaAn Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de...7.3 High
- vipa controls winplc7 firmwareA Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior. A...7.5 High
- rockwellautomation connected components workbenchA DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW)....7.0 High
- geutebruck ip camera g-cam efd-2250 firmwareAn Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11...9.8 Critical
- geutebrueck ip camera g-cam efd-2250 firmwareAn Improper Neutralization of Special Elements (in an OS command) issue was discovered in...9.8 Critical
- graphicsmagick, imagemagick, debian linux +2 moreImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE...7.5 High
- freedesktop popplerpoppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the...6.5 Medium
- dropbear ssh project ssh, debian linux +1 moreDropbear before 2017.75 might allow local users to read certain files as root, if the file has...4.7 Medium
- debian linux, dropbear ssh project ssh, netapp h410c firmware +2 moreThe server in Dropbear before 2017.75 might allow post-authentication root remote code execution...8.8 High
- linux kernelThe tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1...7.8 High
- debian linux, linux kernel +1 moreThe dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1...7.8 High
- debian linux, linux kernel +1 moreThe sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1...7.8 High
- linux kernelThe IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that...7.8 High
- redhat spacewalk, [unknown] spacewalk-backend, redhat satellite +2 moreIt was found that spacewalk-channel can be used by a non-admin user or disabled users to perform...6.5 Medium
openjdk-7Ubuntuopenjdk-7 regressionNo score- cisco telepresence ix5000A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an...7.5 High
- cisco policy suiteA vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS)...7.8 High
- cisco prime collaboration provisioningA vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an...9.8 Critical
- cisco prime collaboration, prime collaboration provisioning +1 moreA vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an...7.5 High
- mcafee epolicy orchestrator (epo), epolicy orchestrator +1 moreA directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9...7.2 High
- calendarxp flatcalendarxp, popcalendarxp +1 moreTwo CalendarXP products have XSS in common parts of HTML files. CalendarXP FlatCalendarXP through...6.1 Medium
- modx revolutionMODX Revolution XSS via HTTP Host header4.7 Medium
- modx revolutionMODX Revolution cross-site scripting vulnerability5.4 Medium
- modx revolutionMODX Revolution allows overwriting .htaccess8.8 High
- modx revolutionMODX Revolution Reflected XSS6.1 Medium
- modx revolution, php +1 moreMODX Revolution Directory Traversal Vulnerability7.0 High
- red hat, inc. jboss enterprise application platformIt was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform...9.8 Critical
- wordpress, debian linux +1 moreIn WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading...8.6 High
- wordpress, debian linux +1 moreIn WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC...7.5 High
- wordpress, debian linux +1 moreIn WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the...8.8 High
- wordpress, debian linux +1 moreIn WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer...6.1 Medium
- wordpress, debian linux +1 moreIn WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.8.6 High
- wordpress, debian linux +1 moreIn WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to...6.1 Medium
- micro focus vibeAn absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a...6.5 Medium
- linux kernelThe NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial...5.5 Medium
- libdwarf project libdwarfAn issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata()...9.8 Critical
- libdwarf project libdwarfAn issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In...9.8 Critical
- libdwarf project libdwarfAn issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer...9.1 Critical
- Show moreLoading…