CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- kiri tweenUntrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain...7.8 High
- iid rbb speed test, iid, inc. rbb speed test app for android, rbb speed test app for ios +2 moreThe RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version...5.9 Medium
- cs-cart, cs-cart multivendor, frogman office inc. cs-cart japanese edition +1 more +3 moreCross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier ...8.8 High
- gigaccsecure gigacc officeGigaCC OFFICE ver.2.3 and earlier allows remote attackers to upload arbitrary files as a user...6.5 Medium
- gigaccsecure gigacc officeGigaCC OFFICE ver.2.3 and earlier allows remote attackers to execute arbitrary OS commands via...5.5 Medium
- mufg mitsubishi ufj, the bank of tokyo-mitsubishi ufj, ltd. app for android +1 moreThe Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man...3.1 Low
- sol-connect sol.connect iset-mpp meter firmwareSQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote...9.8 Critical
- joomla joomla\!The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which...8.8 High
- etoilewebdesign ultimate product catalogThe Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product...6.1 Medium
- etoilewebdesign ultimate product catalogThe Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp...9.8 Critical
- libquicktimeIn libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in...6.5 Medium
- ytnef project ytnefIn ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which...5.5 Medium
- libquicktimeIn libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in...6.5 Medium
- ytnef project ytnefIn ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef...5.5 Medium
- xoopsXOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in...6.1 Medium
- xoopsXOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php...6.1 Medium
- phpThe GIF decoding function gdImageCreateFromGifCtx in gd_gif_in.c in the GD Graphics Library (aka...6.5 Medium
- varnish-cache varnish, varnish cache project cache, varnish-software varnish cache +2 moreAn issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0,...7.5 High
- ytnef project ytnefIn ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi...5.5 Medium
- imagemagickThe ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error...6.5 Medium
- qemu, debian linux +1 moreThe address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local...4.4 Medium
- qemu, debian linux +1 moreStack-based buffer overflow in hw/usb/redirect.c in QEMU (aka Quick Emulator) allows local guest...5.5 Medium
- microsoft office, outlook +1 moreMicrosoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook...7.8 High
- microsoft office, outlook +1 moreMicrosoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook...5.5 Medium
- microsoft office, outlook +1 moreMicrosoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook...7.8 High
- ibm worklight, mobilefirst platform foundation +1 moreA Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed...6.1 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability....9.8 Critical
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the...6.5 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that...8.8 High
- gnu glibcThe DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS...5.9 Medium
- mantisbtMantisBT vulnerable to XSS via unsanitized filter field in manage_user_page.php6.1 Medium
- mantisbtMantisBT XSS allows unsanitized input via admin/install.php6.1 Medium
- trend micro, inc. micro deep discovery director, trendmicro deep discovery director +1 moreA command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows...9.8 Critical
- trend micro, inc. micro deep discovery director, trendmicro deep discovery director +1 moreBackup archives were found to be encrypted with a static password across different installations,...9.8 Critical
- trend micro, inc. micro deep discovery director, trendmicro deep discovery director +1 moreConfiguration and database backup archives are not signed or validated in Trend Micro Deep...7.5 High
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for...6.5 Medium
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for...7.5 High
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The login...6.5 Medium
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for...7.5 High
- heinekingmedia stashcatAn issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate...7.5 High
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for...5.9 Medium
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for...8.1 High
- stashcat heinekingmediaAn issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is...9.8 Critical
- mantisbtThe "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access...5.3 Medium
- underbit mad libmadmpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which...6.5 Medium
- goldplugins easy testimonialsThe Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php,...6.1 Medium
- event list project listThe Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin...6.1 Medium
- potrace project potracePotrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.7.5 High
- cactiCross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows...5.4 Medium
- cactispikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via...9.8 Critical
- Show moreLoading…