CVEs published in May 2017
1,012 vulnerabilities, 142 critical, 10 exploited.
- openvswitchIn Open vSwitch (OvS) 2.7.0, while parsing an OpenFlow role status message, there is a call to...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-6 Q16, the ReadJNGImage function in coders/png.c allows attackers to cause a...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-6 Q16, the ReadMNGImage function in coders/png.c allows attackers to cause a...6.5 Medium
- freeradiusThe TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017...9.8 Critical
- eclipse mosquitto, debian linux +1 moreIn Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username...6.5 Medium
- finecms project finecmsandrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the...6.1 Medium
- finecms project finecmsandrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to...6.1 Medium
- jerryscriptThe lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0...7.5 High
- allen disk project diskCross-site scripting (XSS) vulnerability in Allen Disk 1.6 allows remote authenticated users to...5.4 Medium
- aries networks qwr-1104 wireless-n router firmwareAries QWR-1104 Wireless-N Router with Firmware Version WRC.253.2.0913 has XSS on the Wireless...6.1 Medium
vlcMageiaUpdated vlc packages fix security vulnerabilityNo score- contiki-os contikiAn issue was discovered in Contiki Operating System 3.0. A Persistent XSS vulnerability is...6.1 Medium
- contiki-os contikiAn issue was discovered in Contiki Operating System 3.0. A use-after-free vulnerability exists in...7.5 High
- gajimGajim through 0.16.7 unconditionally implements the "XEP-0146: Remote Controlling Clients"...4.5 Medium
- picocom project picocompicocom before 2.0 has a command injection vulnerability in the 'send and receive file' command...9.8 Critical
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA weak password recovery vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows...7.5 High
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreAn open redirect vulnerability in Fortinet FortiPortal 4.0.0 and below allows attacker to execute...6.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...6.1 Medium
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreA password management vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows an...7.5 High
- fortinet fortiportal, fortinet, inc. fortinet fortiportal +1 moreAn improper Access Control vulnerability in Fortinet FortiPortal versions 4.0.0 and below allows...9.1 Critical
- fortinet fortiwlc-sd, fortinet, inc. fortinet fortiwlc-sd +1 moreAn escalation of privilege vulnerability in Fortinet FortiWLC-SD versions 8.2.4 and below allows...7.2 High
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiWeb versions 5.7.1 and below allows...6.1 Medium
- fortinet fortianalyzer firmware, fortimanager firmware, fortianalyzer, fortimanager +1 more +3 moreAn Open Redirect vulnerability in Fortinet FortiAnalyzer 5.4.0 through 5.4.2 and FortiManager 5.4...6.1 Medium
- apache knoxApache Knox allows impersonation of users6.8 Medium
- microsoft malware protection engine, microsoft corporation malware protection, microsoft forefront security +1 more +3 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft malware protection engine, forefront security, windows defender +2 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...7.8 High
- microsoft exchange server, malware protection engine, endpoint protection +6 more +8 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...7.8 High
- microsoft malware protection engine, forefront security, windows defender +2 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft malware protection engine, forefront security, windows defender +2 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...7.8 High
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- microsoft exchange server, microsoft corporation malware protection engine, microsoft endpoint protection +5 more +7 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...5.5 Medium
- netgear multiple devices, wnr2000 firmware +1 moreNETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5...9.8 Critical
- yodl project yodlYodl before 3.07.01 has a Buffer Over-read in the queue_push function in queue/queuepush.c.9.8 Critical
- contao cmsContao Core directory traversal vulnerability4.3 Medium
- foremanForeman since version 1.5 is vulnerable to an incorrect authorization check due to which users...8.8 High
- hcl software inotesIBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to...6.1 Medium
- ibm maximo asset management, maximo asset management essentials +1 moreIBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive...5.3 Medium
- ibm maximo asset management, maximo asset management essentials +1 moreIBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A...5.4 Medium
- linux kernelThe __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel through 4.11.3 is too...5.5 Medium
- exiv2, canonical ubuntu linux +1 moreAn issue was discovered in Exiv2 0.26. When the data structure of the structure ifd is incorrect,...6.5 Medium
- canonical jujuJuju uses a UNIX domain socket without setting appropriate permissions9.8 Critical
- trendmicro serverprotectMultiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0...6.1 Medium
- trendmicro serverprotectTrend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by...7.8 High
- trendmicro serverprotectTrend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper...7.4 High
- trendmicro serverprotectTrend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary...9.8 Critical
- trendmicro serverprotectCross-site request forgery (CSRF) vulnerability in Trend Micro ServerProtect for Linux 3.0 before...8.8 High
- trendmicro serverprotectMultiple cross-site scripting (XSS) vulnerabilities in Trend Micro ServerProtect for Linux 3.0...6.1 Medium
- netapp oncommand unified manager core packageNetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1 might allow remote attackers to...7.5 High
- netapp oncommand unified manager core packageSQL injection vulnerability in NetApp OnCommand Unified Manager Core Package 5.x before 5.2.2P1...7.5 High
- Show moreLoading…