CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- linux kernelRace condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local...7.0 High
- gonitro nitro proNitro Pro 11.0.3.173 allows remote attackers to execute arbitrary code via saveAs and launchURL...8.8 High
- ioquake3Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of...9.8 Critical
- technicolor tc7337 firmwarePersistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20...6.1 Medium
- oneplus primary bootloaderThe OnePlus 2 Primary Bootloader (PBL) does not validate the SBL1 partition before executing it,...9.8 Critical
- imagemagickImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c,...7.5 High
- trendmicro control managerXML external entity (XXE) processing vulnerability in Trend Micro Control Manager 6.0, if...7.5 High
- trendmicro control managerDirectory traversal vulnerability in Trend Micro Control Manager 6.0 allows remote code execution...9.8 Critical
- trendmicro control managerSQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when...8.8 High
- trendmicro control managerAuthentication Bypass in Trend Micro Control Manager 6.0 causes Information Disclosure when...7.5 High
- trendmicro control managerSQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing...9.8 Critical
- trendmicro control managerSQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing...9.8 Critical
- trendmicro control managerSQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing...9.8 Critical
- trendmicro control managerSQL Injection in Trend Micro Control Manager 6.0 causes Remote Code Execution when executing...9.8 Critical
- razerzone razer synapseA specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse that can cause...5.5 Medium
- razer synapseA specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104...9.8 Critical
- paloaltonetworks pan-osCross-site scripting (XSS) vulnerability in the GlobalProtect external interface in Palo Alto...6.1 Medium
- paloaltonetworks pan-osCross-site scripting (XSS) vulnerability in the management web interface in Palo Alto Networks...6.1 Medium
- sierrawireless sierra wireless em7345 software, sierra wireless em7455 software, sierra wireless location sensor driver +2 moreMultiple unquoted service path vulnerabilities in Sierra Wireless Windows Mobile Broadband Driver...7.8 High
- trelloCross-site scripting (XSS) vulnerability in the Trello app before 4.0.8 for iOS might allow...6.1 Medium
- paloaltonetworks pan-osThe DNS Proxy in Palo Alto Networks PAN-OS before 6.1.18, 7.x before 7.0.16, 7.1.x before 7.1.11,...9.8 Critical
- hashicorp vagrant vmware fusionThe sudo helper in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) before...7.8 High
- gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) before 9.0.11, 9.1.8, 9.2.8 allow an...6.3 Medium
- gitlabGitLab Enterprise Edition (EE) before 8.17.7, 9.0.11, 9.1.8, 9.2.8, and 9.3.8 allows an...6.5 Medium
- pega platformThe application distribution export functionality in PEGA Platform 7.2 ML0 and earlier allows...6.5 Medium
- pega platformMultiple cross-site scripting (XSS) vulnerabilities in PEGA Platform 7.2 ML0 and earlier allow...6.1 Medium
- f-secure online scannerUntrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute...7.8 High
- samsung mobileRace condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in...7.0 High
- citrix netscaler application delivery controller, netscaler gateway +1 moreThe TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller ...5.9 Medium
- digium addons moduleMultiple cross-site scripting (XSS) vulnerabilities in views/add-license-form.php in the Digium...6.1 Medium
- zohocorp manageengine desktop centralManage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of...9.8 Critical
- unit4 teta webSession fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and...9.8 Critical
- ibm sterling b2b integrator, sterling file gateway +1 moreXML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM...6.5 Medium
- ibm curam social program managementIBM Curam Social Program Management 6.0 SP2 before EP26, 6.0.4 before 6.0.4.5iFix10 and 6.0.5...8.8 High
- cisco iosCisco IOS before 15.2(4)S6 does not initialize an unspecified variable, which might allow remote...6.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a...4.9 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated...7.8 High
- ibm infosphere information serverA network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can...8.1 High
- ibm infosphere information serverIBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity...9.1 Critical
- ibm websphere mq, websphere mq internet pass-thru +1 moreIBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop...7.5 High
- ibm security appscan enterprise, security appscan +1 moreIBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an...8.1 High
- claybird lhaforgeUntrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain...7.8 High
- sony nfc port software removerUntrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows...7.8 High
- sony nfc net installer, sfcard viewer 2, sony corporation pc/sc activator for type b +4 more +6 moreUntrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310...7.8 High
- silkypress simple custom css and jsCross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote...6.1 Medium
- code-atlantic popup maker, popup maker maker +1 moreCross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers...6.1 Medium
- i-o data device, inc. wn-g300r3, iodata wn-g300r3 firmware +1 moreWN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an...8.0 High
- i-o data device, inc. wn-ax1167gr, iodata wn-ax1167gr firmware +1 moreBuffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute...6.8 Medium
- i-o data device, inc. wn-ax1167gr, iodata wn-ax1167gr firmware +1 moreWN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands...8.8 High
- i-o data device, inc. wn-ax1167gr, iodata wn-ax1167gr firmware +1 moreWN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an...8.8 High
- Show moreLoading…