CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- openvpn access serverCRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote...6.1 Medium
- sap business oneSAP Business One for Android 1.2.3 allows remote attackers to conduct XML External Entity (XXE)...9.6 Critical
- pivotal spring framework, spring security, spring security +2 moreSpring Security and Spring Framework may not recognize certain paths that should be protected7.5 High
- pivotal spring security oauth, spring security oauth +1 moreSpring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views8.8 High
- cloudfoundry cloud foundry, pivotal bosh stemcell +1 moreAn endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6...9.0 Critical
- cloudfoundry cloud foundry, pivotal software cloud foundry uaa, login-server +2 more +4 moreCloud Foundry UAA reset password vulnerable to brute force attack8.1 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreThe Loggregator Traffic Controller endpoints in cf-release v231 and lower, Pivotal Elastic...6.5 Medium
- cloudfoundry cloud foundry, pivotal software login-server, cloudfoundry cloud foundry uaa bosh +2 more +4 moreThe UAA OAuth approval pages in Cloud Foundry v208 to v231, Login-server v1.6 to v1.14, UAA v2.0...6.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreIt was discovered that cf-release v231 and lower, Pivotal Cloud Foundry Elastic Runtime 1.5.x...7.5 High
- cloudfoundry cloud foundry, garden linux, pivotal software cloud foundry elastic runtime +2 moreCloud Foundry Garden-Linux versions prior to v0.333.0 and Elastic Runtime 1.6.x version prior to...9.8 Critical
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...8.8 High
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreWith Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or...6.1 Medium
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +1 more +3 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password3.7 Low
- cloudfoundry cf-release, cloud foundry, pivotal software cloud foundry elastic runtime +2 moreA path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller...6.5 Medium
- pivotal spring security, spring security +1 moreAuthorization Bypass in Spring Security9.8 Critical
- pivotal spring security, spring security +1 moreImproper Authentication in Spring Security7.3 High
firefoxUbuntufirefox updateNo score- puppet, puppet server, debian linux +2 moreVersions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the...8.2 High
- debian linux, linux kernel +1 moreLinux drivers/char/lp.c Out-of-Bounds Write. Due to a missing bounds check, and the fact that...7.8 High
- bitcoin** DISPUTED ** The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology...7.5 High
- oniguruma project oniguruma, php, ruby-lang ruby +2 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Critical
- zabbix, zabbix server +1 moreAn exploitable code execution vulnerability exists in the trapper command functionality of Zabbix...8.1 High
- power software powerisoA use-after-free vulnerability exists in the .ISO parsing functionality of PowerISO 6.8. A...8.8 High
- hancom hangul word processor, thinkfree office neo, hangul word processor in thinkfree office neo trial word +2 moreAn exploitable heap-based buffer overflow exists in the Hangul Word Processor component (version...8.8 High
- power software powerisoA stack buffer overflow vulnerability exists in the ISO parsing functionality of Power Software...8.8 High
- wolfsslA specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL...8.1 High
- antenna house dmc htmlfilter, marklogic +1 moreAn exploitable heap corruption vulnerability exists in the AddSst functionality of Antenna House...8.3 High
- antenna house dmc htmlfilter, marklogic +1 moreAn exploitable heap corruption vulnerability exists in the GetIndexArray functionality of Antenna...8.3 High
- systemd project systemdsystemd-resolved through 233 allows remote attackers to cause a denial of service (daemon crash)...7.5 High
- artifex jbig2dec, debian linux +1 morelibjbig2dec.a in Artifex jbig2dec 0.13, as used in MuPDF and Ghostscript, has a NULL pointer...6.5 Medium
- oniguruma project oniguruma, php, ruby-lang ruby +2 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...7.5 High
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Critical
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Critical
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Critical
- oniguruma project oniguruma, php +1 moreAn issue was discovered in Oniguruma 6.2.0, as used in Oniguruma-mod in Ruby through 2.4.1 and...9.8 Critical
- samba, debian linux +1 moreSamba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code...9.8 Critical
- kodi, debian linux, xbmc foundation kodi (xbmc) +2 moreDirectory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary...5.5 Medium
- videolan vlc, vlc media player +1 moreHeap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string...5.5 Medium
- videolan vlc, debian linux, videolan vlc media player +2 moreHeap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows...5.5 Medium
- videolan vlc, vlc media player +1 morePotential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping...7.8 High
- videolan vlc, vlc media player +1 moreHeap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string...5.5 Medium
- config-model project config-modellib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to...7.8 High
- config-model project config-modelThe gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka...7.3 High
- fortinet fortiosA stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute...4.8 Medium
- antenna house dmc htmlfilter, marklogic +1 moreAn exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of...8.3 High
- antenna house dmc htmlfilter, marklogic +1 moreAn exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality...8.3 High
- antenna house dmc htmlfilter, marklogic +1 moreAn exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of...8.3 High
- antenna house dmc htmlfilter, marklogic +1 moreAn exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna...8.3 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +7 more +9 moreIn some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may...9.8 Critical
- bavarian motor works bluetooth stackThe Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via ...7.5 High
- Show moreLoading…