CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- google androidThe updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a...5.5 Medium
- zend frameworkZend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows...9.1 Critical
- grml grml-debootstrapcmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is...7.5 High
- snapcreek duplicatorThe Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and...8.2 High
- w3eden download managerThe basic_settings function in the download manager plugin for WordPress before 2.7.3 allows...8.8 High
- zopeZope Cross-site scripting (XSS) vulnerability in ZMI pages6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display6.1 Medium
- liferay portalLiferay Portal XSS Vulnerability6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS via a Knowledge Base Article Title6.1 Medium
- liferay portalLiferay Portal XSS Vulnerability6.1 Medium
- liferay portalLiferay Portal Vulnerable to XSS via an Invalid portletId6.1 Medium
- quest k1000 as a service, kace asset management appliance, kace systems management appliance +2 moreSQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems...9.8 Critical
- liferay portalLiferay Portal Vulnerable to XSS via a Crafted Redirect Field6.1 Medium
- apache commons emailImproper Input Validation in Apache Commons Email7.5 High
- imagemagickImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\mpc.c.8.8 High
- imagemagickImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\png.c.8.8 High
- kaseya unitrends backupIt was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0...8.8 High
- kaseya unitrends backupIt was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has...9.8 Critical
- kaseya unitrends backupIt was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0,...9.8 Critical
- infineon s-gold 2 pmb 8876A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB...6.6 Medium
- infineon s-gold 2 pmb 8876An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered...8.8 High
- pdqinc laserjet firmware, laserwash 360 firmware, laserwash 360 plus firmware +8 more +10 moreA Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and...9.8 Critical
- pdqinc laserjet firmware, laserwash 360 firmware, laserwash 360 plus firmware +8 more +10 moreAn Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series...9.4 Critical
- nxp i.mx 50 firmware, i.mx 53 firmware, i.mx 6dual firmware +24 more +26 moreA stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX...6.3 Medium
- nxp i.mx 28 firmware, i.mx 50 firmware, i.mx 53 firmware +27 more +29 moreAn improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX...6.0 Medium
- selinc sel-3620 firmware, sel-3622 firmware +1 moreAn Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL...10.0 Critical
- abb vsn300 firmware, vsn300 for react firmware +1 moreAn Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15...7.5 High
- abb vsn300 firmware, vsn300 for react firmware +1 moreA Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger...6.5 Medium
- cisco ios, ios xe, nx-os +4 more +6 moreCisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX...4.2 Medium
- cisco secure access control systemA vulnerability in the web-based management interface of the Cisco Secure Access Control System ...5.4 Medium
- cisco firesight system softwareA vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco...7.5 High
- cisco adaptive security appliance softwareA vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA)...6.1 Medium
- cisco adaptive security appliance softwareA vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA)...5.4 Medium
- cisco meeting serverA vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4...7.5 High
- cisco jabber guestA vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0...6.1 Medium
- cisco finesseA vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could...6.1 Medium
- cisco prime collaboration provisioningA vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1...6.5 Medium
- cisco unified communications managerA vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6)...6.5 Medium
- cisco unified communications managerA vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11...8.8 High
- cisco prime collaboration provisioningA vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool...8.8 High
- cisco smart net total care collector applianceA vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC)...6.5 Medium
- cisco adaptive security appliance softwareA vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9...7.5 High
- cisco identity services engineA vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow...9.8 Critical
- cisco videoscape distribution suite for televisionA vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for...7.5 High
- cisco ios, ios xe +1 moreA vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE...6.5 Medium
- cisco ios xeA vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an...7.5 High
- cisco ios, ios xe, ios and ios xe software +2 moreA vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE...6.5 Medium
- cisco data center network managerCisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java...7.5 High
- linux kernelThe ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of...5.5 Medium
- opencv, debian linux +1 moreOut-of-bounds Write in OpenCV8.8 High
- Show moreLoading…