CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- cisco unified computing systemA vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could...7.5 High
- cisco firepower threat defense, secure firewall threat defense +1 moreA vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco...7.5 High
- cisco ip phone 8800 series firmwareA vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11...5.3 Medium
- linux kernelThe do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make...5.5 Medium
- libtiffLibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow...6.5 Medium
- ytnef project ytnefThe TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a...8.8 High
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling...6.5 Medium
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a...6.5 Medium
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob...6.5 Medium
- imagemagick, debian linux +1 moreIn ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the...6.5 Medium
- flexera software llc gnutls libtasn1, gnu libtasn1, apache bookkeeper +1 more +3 moreTwo errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4...8.8 High
- apple safari, iphone os +1 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before...8.8 High
- apple safari, iphone os +1 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before...8.8 High
- apple tvos, watchos, iphone os +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...9.8 Critical
- apple tvos, watchos, iphone os +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...9.8 Critical
- apple tvos, watchos, iphone os +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10...9.8 Critical
- apple safari, iphone os +1 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before...6.1 Medium
- apple safari, iphone os +1 moreAn issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before...8.8 High
- tendacn f1200 firmware, f1202 firmware, fh1202 firmware +2 moreThere is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before...3.5 Low
- tendacn f1200 firmware, f1202 firmware, fh1202 firmware +2 moreThere is a debug-interface vulnerability on some Tenda routers (FH1202/F1202/F1200: versions...8.0 High
- ceragon fiberair ip-10 firmwareCeragon FibeAir IP-10 wireless radios through 7.2.0 have a default password of mateidu for the...7.3 High
- mimosa client radios, backhaul radios +1 moreAn issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface,...7.5 High
- mimosa backhaul radios, client radios +1 moreAn issue was discovered on Mimosa Client Radios before 2.2.4 and Mimosa Backhaul Radios before 2...8.8 High
- mimosa backhaul radios, client radios +1 moreAn information-leakage issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa...7.5 High
- mimosa backhaul radios, client radios +1 moreAn issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2...8.8 High
- mimosa backhaul radios, client radios +1 moreA hard-coded credentials issue was discovered on Mimosa Client Radios before 2.2.3, Mimosa...7.5 High
- mimosa backhaul radios, client radios +1 moreAn issue was discovered on Mimosa Client Radios before 2.2.3 and Mimosa Backhaul Radios before 2...7.5 High
vlcMageiaUpdated vlc packages fix security vulnerabilityNo scorewebminMageiaUpdated webmin packages fix security vulnerabilityNo score- php, netapp clustered data ontap, storage automation store +2 moreThe i_zval_ptr_dtor function in Zend/zend_variables.h in PHP 7.1.5 allows attackers to cause a...9.8 Critical
- openexrIn OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause...6.5 Medium
- openexrIn OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the...8.8 High
- openexrIn OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause...6.5 Medium
- openexrIn OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile...8.8 High
- openexrOpenEXR invalid read6.5 Medium
- openexrOpenEXR invalid write8.8 High
- openexrIn OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause...6.5 Medium
- playsmsimport.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via...9.8 Critical
- jasypt project jasyptExposure of Sensitive Information to an Unauthorized Actor in Apache Jasypt7.5 High
- pmail pegasuswinpm-32.exe in Pegasus Mail (aka Pmail) v4.72 build 572 allows code execution via a crafted ssgp...7.3 High
- secure-bytes secure cisco auditorSecure Bytes Cisco Configuration Manager, as bundled in Secure Bytes Secure Cisco Auditor (SCA) 3...7.5 High
- mantisbtMantisBT vulnerable to CSRF and Open Redirect attacks6.5 Medium
- dlink dir-600m firmwarelogin.cgi on D-Link DIR-600M devices with firmware 3.04 allows remote attackers to bypass...8.8 High
- libtiff, canonical ubuntu linux +1 moreIn LibTIFF 4.0.7, the program processes BMP images without verifying that biWidth and biHeight in...4.0 Medium
- red hat, inc. jboss, redhat jboss enterprise application platform +1 moreHTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which...9.8 Critical
- cairographics cairocairo is vulnerable to denial of service due to a null pointer dereference5.5 Medium
- entropymine imageworsenerThe lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.1 allows...6.5 Medium
- entropymine imageworsenerThe my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1...6.5 Medium
- apache juddiModerate severity vulnerability that affects org.apache.juddi:juddi-client6.1 Medium
- allen disk project disk/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1,...7.5 High
- Show moreLoading…