CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- atutor Cross-site scripting (XSS) vulnerability in popuphelp.php in ATutor 2.2 and earlier allows remote... 6.1 Medium
- pngcrush project pngcrush Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows... 9.8 Critical
- phpfilemanager project phpfilemanager phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. 8.8 High
- openstack designate Designate mDNS DoS through incorrect handling of large RecordSets 6.5 Medium
- soplanning The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a... 5.3 Medium
- soplanning Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and... 5.3 Medium
- soplanning Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login... 7.5 High
- icewarp server In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in... 6.1 Medium
- automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 more An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5... 7.3 High
- kohanaframework kohana, debian linux +1 more Cross-site scripting (XSS) vulnerability in the Security component of Kohana before 3.3.6 allows... 6.1 Medium
- opencart SQL injection vulnerability in the updateAmazonOrderTracking function in upload/admin/model... 7.2 High
- phpthumb project phpthumb Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote... 6.1 Medium
- nexusphp SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the id parameter to linksmanage.php in an... 9.8 Critical
- nexusphp Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to ipsearch... 6.1 Medium
- nexusphp SQL Injection exists in NexusPHP 1.5.beta5.20120707 via the usernw array parameter to nowarn.php. 9.8 Critical
- asynchttpclient project async-http-client Improper Input Validation in async-http-client 7.5 High
- gnu libidn2 Integer overflow in the _isBidi function in bidi.c in Libidn2 before 2.0.4 allows remote... 9.8 Critical
- ffmpeg In FFmpeg 3.3.3, a DoS in cine_read_header() due to lack of an EOF check might cause huge CPU and... 6.5 Medium
- ffmpeg In FFmpeg 2.4 and 3.3.3, the read_data function in libavformat/hls.c does not restrict reload... 6.5 Medium
- ffmpeg In FFmpeg 3.3.3, a DoS in asf_read_marker() due to lack of an EOF (End of File) check might cause... 6.5 Medium
- ffmpeg In libavformat/rl2.c in FFmpeg 3.3.3, a DoS in rl2_read_header() due to lack of an EOF (End of... 6.5 Medium
- ffmpeg In libavformat/mvdec.c in FFmpeg 3.3.3, a DoS in mv_read_header() due to lack of an EOF (End of... 6.5 Medium
- ffmpeg In libavformat/rmdec.c in FFmpeg 3.3.3, a DoS in ivr_read_header() due to lack of an EOF (End of... 6.5 Medium
- ibm emptoris sourcing IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks,... 6.1 Medium
- ibm emptoris sourcing IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks,... 5.4 Medium
- ibm emptoris sourcing IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability... 5.4 Medium
- ibm emptoris sourcing IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability... 5.4 Medium
- vxsearch vx search Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers... 9.8 Critical
- cloudfoundry cf-release Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to... 4.7 Medium
- synology cloud station drive Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive... 7.8 High
- blackcat-cms blackcat cms In BlackCat CMS 1.2, backend/addons/install.php allows remote authenticated users to execute... 8.8 High
- blackcat-cms blackcat cms In BlackCat CMS 1.2, backend/settings/ajax_save_settings.php allows remote authenticated users to... 5.4 Medium
- blackcat-cms blackcat cms BlackCat CMS 1.2 allows remote authenticated users to inject arbitrary PHP code into info.php via... 8.8 High
- blackcat-cms blackcat cms In BlackCat CMS 1.2, remote authenticated users can upload any file via the media upload function... 6.5 Medium
- ruby-lang ruby, canonical ubuntu linux, debian linux +6 more +8 more Ruby through 2.2.7, 2.3.x through 2.3.4, and 2.4.x through 2.4.1 can expose arbitrary memory... 9.8 Critical
- gnu libidn2, debian linux +1 more Integer overflow in the decode_digit function in puny_decode.c in Libidn2 before 2.0.4 allows... 9.8 Critical
- imagemagick, canonical ubuntu linux +1 more In ImageMagick 7.0.6-10, a NULL Pointer Dereference issue is present in the ReadCUTImage function... 6.5 Medium
- linux kernel An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx... 4.4 Medium
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 more RubyGems has Origin Validation Error vulnerability 8.1 High
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 more RubyGems may allow a maliciously crafted gem to overwrite files 7.5 High
- rubygems, debian linux, redhat enterprise linux desktop +5 more +7 more RubyGems Improper Input Validation vulnerability 7.5 High
- hackerone rubygems, debian linux, redhat enterprise linux desktop +5 more +7 more RubyGems Code Injection vulnerability 9.8 Critical
- graphicsmagick A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in... 6.5 Medium
- uclouvain openjpeg, debian linux +1 more A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in... 8.8 High
- uclouvain openjpeg, debian linux +1 more An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash... 8.8 High
- uclouvain openjpeg, debian linux +1 more A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2... 8.8 High
- ibm emptoris spend analysis IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This... 5.4 Medium
- ibm emptoris spend analysis IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This... 5.4 Medium
- ibm emptoris services procurement IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site scripting. This... 6.1 Medium
- ibm emptoris services procurement IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site request forgery which... 8.8 High
- Show olderLoading…