CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner_gettoken...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid...7.5 High
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid...7.5 High
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid...7.5 High
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid...7.5 High
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid...7.5 High
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid...7.5 High
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_rawpbm...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm_load_raw function...9.8 Critical
- autotrace project autotracelibautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm_load_ascii...9.8 Critical
- sap hana xssinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of...7.5 High
- sap hana xssinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or...8.3 High
- sap netweaver application server javaThe Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote...8.8 High
- synacor zimbra collaboration suiteCross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows...6.1 Medium
- synacor zimbra collaboration suiteDirectory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows...9.8 Critical
- synacor zimbra collaboration suiteA service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed...9.8 Critical
- vimbadminViMbAdmin Cross-site Scripting Vulnerabilities5.4 Medium
- pngquantInteger overflow in the rwpng_read_image24_libpng function in rwpng.c in pngquant 2.7.0 allows...7.8 High
- lenovo solution centerThe backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local...7.8 High
- vanillaforums vanillaThe from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote...7.5 High
- redmineCross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to...6.1 Medium
- huawei p7-l00 firmware, p7-l05 firmware, p7-l09 firmware +2 moreThe GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7...7.8 High
- pgbouncerPgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain...8.1 High
- huawei wlan ac6005 firmware, wlan ac6605 firmware, wlan acu2 firmware +2 moreThe mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before...7.5 High
- powerplay gallery project galleryupload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create...7.5 High
- image-export project image-exportAbsolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote...9.1 Critical
- mdc youtube downloader project youtube downloaderAbsolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress...7.5 High
- wpshopstyling wp e-commerce shop stylingDirectory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for...7.5 High
- teradata express, gateway +1 moreTeradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15...7.5 High
- roundcube webmailRoundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by...7.5 High
- roundcube webmailCross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x...6.1 Medium
- download zip attachments project zip attachmentsDirectory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows...7.5 High
- aviary image editor add-on for gravity forms project image editor add-on for gravity formsUnrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on...9.8 Critical
- pgbouncerPgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer...7.5 High
- alienvault open source security information managementThe asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to...7.2 High
- alienvault open source security information managementThe sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local...6.7 Medium
- google androidInteger overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a...7.5 High
- debian linux, openvswitch, redhat openstack +2 more +4 moreIn Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message,...9.8 Critical
- qpdf project qpdf, canonical ubuntu linux +1 morelibqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion...5.5 Medium
- qpdf project qpdf, canonical ubuntu linux +1 morelibqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion...5.5 Medium
- qpdf project qpdf, canonical ubuntu linux +1 morelibqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion...5.5 Medium
- ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm sdk, runtimes for java technology +1 moreIBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when...8.2 High
- ibm content navigatorIBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm business process manager, business process manager advanced +1 moreIBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing...5.4 Medium
- ibm informix open admin tool, informix servers +1 moreIBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute...9.8 Critical
- ibm distributed marketing, marketing platform, marketing operations +2 moreIBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an...8.8 High
- metadata anonymisation toolkit project anonymisation toolkitMetadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata"...7.5 High
- apache archivaApache Archiva vulnerable to Cross Site Request Forgery8.0 High
- information-technology promotion agency, japan (ipa) empirical project monitor - extendedUntrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows...7.8 High
- Show moreLoading…