CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- imagemagickIn ImageMagick 7.0.6-2, a memory exhaustion vulnerability was found in the function ReadPSDImage...6.5 Medium
- ledger-cli ledgerThe ledger::parse_date_mask_routine function in times.cc in Ledger 3.1.1 allows remote attackers...7.8 High
- ledger-cli ledgerThe find_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial...7.8 High
- baidu ime, baidu japan inc. installer of baidu ime +1 moreUntrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an...7.8 High
- ibm content navigatorIBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- h.shirouzu / asahi net, inc. installer of ip messenger for win, ipa ip messenger +1 moreUntrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows...7.8 High
- intercom malion, intercom, inc. malion for mac +1 moreMaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an...5.9 Medium
- intercom malion, intercom, inc. malion for windows and mac +1 moreMaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may...9.8 Critical
- intercom malion, intercom, inc. malion for windows and mac +1 moreMaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to...9.8 Critical
- intercom malion, intercom, inc. malion for windows and mac +1 moreSQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote...9.8 Critical
- intercom malion, intercom, inc. malion for mac, malion for windows +2 moreMaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac...8.1 High
- gnu binutilsThe bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD)...7.8 High
- gnu binutilsThe nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD)...7.8 High
- gnu binutilsThe bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library...7.8 High
- gnu binutilsThe read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows...7.8 High
- gnu binutilsThe evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka...7.8 High
- gnu binutilsThe _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library ...7.8 High
- gnu binutilsThe _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka...7.8 High
- gnu binutilsThe bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File...7.8 High
- gnu binutilsThe _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary...7.8 High
- gnu binutilsThe alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library ...7.8 High
- gnu binutilsThe _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library...7.8 High
- gnu binutilsThe bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka...7.8 High
- dell storage manager, storage manager 2016, zero day initiative dell storage manager +2 moreDirectory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the...7.5 High
- dashlaneDashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the ...7.3 High
- axis 2100 network camera firmwareAXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml.6.1 Medium
- imagemagickIn ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in...7.5 High
- imagemagickThe ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6...6.5 Medium
- shadow project shadow, debian linux +1 moreIn shadow before 4.5, the newusers tool could be made to manipulate internal data structures in...9.8 Critical
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage...7.5 High
- imagemagickIn ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage...7.5 High
- imagemagickIn ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage...7.5 High
- zohocorp manageengine opmanagerZoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the...9.8 Critical
- ibm websphere application serverIBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security...6.5 Medium
- hcl software inotesIBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to...6.1 Medium
- pcfreetime format factoryFormat Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used...9.8 Critical
- ibm infosphere master data management, infosphere master data management server +1 moreIBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable...5.4 Medium
- trend micro officescanProxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote...9.8 Critical
- trend micro officescanProxy command injection vulnerability in Trend Micro OfficeScan 11 and XG (12) allows remote...9.8 Critical
- trend micro interscan messaging security virtual applianceProxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0...8.8 High
- trend micro interscan messaging security virtual applianceProxy command injection vulnerability in Trend Micro InterScan Messaging Virtual Appliance 9.0...8.8 High
- trend micro deep discovery email inspectorDenial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote...7.5 High
hawkSUSESecurity update for hawkNo score- opensuse libzypplack of keypinning in libzypp could lead to repository switching7.7 High
- opensuse libzypplibzypp accepts unsigned packages even when configured to check signatures8.1 High
- opensuse libzypplibzypp accepts unsigned 3rd party repo without warning8.1 High
- Show moreLoading…