CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- google androidA remote code execution vulnerability in the Android media framework (h263 decoder). Product:...7.8 High
- google androidA remote code execution vulnerability in the Android libraries (sfntly). Product: Android....7.8 High
- google androidA elevation of privilege vulnerability in the Android framework (wi-fi service). Product: Android...7.8 High
- ibm emptoris supplier lifecycle management, emptoris strategic supply management +1 moreIBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to...5.4 Medium
- ibm maximo asset management, maximo asset management essentials +1 moreIBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work...4.3 Medium
- mit kerberos, kerberos 5, fedoraproject fedora +2 moreIn MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion...6.5 Medium
- ibm emptoris supplier lifecycle management, emptoris strategic supply management +1 moreIBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to...5.4 Medium
- ibm emptoris supplier lifecycle management, emptoris strategic supply management +1 moreIBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x is vulnerable to cross-site...5.4 Medium
- samsung galaxy s6 edge firmwareThe DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number...8.8 High
- alcatel-lucent home device managerAlcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to...7.5 High
- mod nss project nssThe mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to...7.5 High
- openstack computeOpenStack Compute (Nova) Improper Access Control4.7 Medium
- restkitRestkit Does Not Validate TLS certificates5.9 Medium
- capnprotoSandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the...7.5 High
- capnprotoSandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a...7.5 High
- capnprotoInteger underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow...9.8 Critical
- capnprotoInteger overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1...9.1 Critical
- intel ethernet diagnostics driver for windows, ethernet diagnostics driver iqvw32.sys, ethernet diagnostics driver iqvw64.sys +2 more(1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics...7.8 High
- novell zenworks configuration managementStack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell...9.8 Critical
- novell zenworks configuration managementcom.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration...7.5 High
- novell zenworks configuration managementRtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain...7.5 High
- novell zenworks configuration managementThe FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote...6.5 Medium
- novell zenworks configuration managementSQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks...9.8 Critical
- novell zenworks configuration managementDirectory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks...9.8 Critical
- novell zenworks configuration managementSQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell...9.8 Critical
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT before 1.2.19 and 1.3.x before 1.3.0-beta.2...6.5 Medium
- openjsf expressNo Charset in Content-Type Header in express6.1 Medium
- telescopeapp telescopeCross-site scripting (XSS) vulnerability in Telescope before 0.9.3 allows remote authenticated...5.4 Medium
- ffmpegUnspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a...9.8 Critical
- ffmpegUnspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a...9.8 Critical
- ffmpegUnspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a...9.8 Critical
- ffmpegUnspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a...9.8 Critical
- ffmpegUnspecified vulnerability in FFmpeg before 0.10.3 has unknown impact and attack vectors, a...9.8 Critical
- blackberry workspaces, workspaces server; watchdox by blackberry server +1 moreAn information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces...8.8 High
- netflix lemurLemur uses static IV per key7.5 High
- saltstack salt 2015salt password information leaked in debug logs9.8 Critical
- elastic logstashLogstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash...5.9 Medium
- elasticsearchImproper Access Control in Elasticsearch7.5 High
- asuswrt-merlinStack buffer overflow in httpd in Asuswrt-Merlin firmware 380.67_0RT-AC5300 and earlier for ASUS...8.8 High
- intel corporation solid-state drive consumer, professional, embedded, data center, intel ssd 540s 2.5\" firmware, ssd 540s series m.2 firmware +5 more +7 moreData corruption vulnerability in firmware in Intel Solid-State Drive Consumer, Professional,...4.6 Medium
- intel corporation solid-state drive professional, intel ssd pro 6000p firmware +1 moreData corruption vulnerability in firmware in Intel Solid-State Drive Professional PSF104P,...4.6 Medium
- perforce puppet enterprise, puppet enterprise +1 moreThe console in Puppet Enterprise 2015.x and 2016.x prior to 2016.4.0 includes unsafe string reads...8.8 High
- tenable nessusWhen linking a Nessus scanner or agent to Tenable.io or other manager, Nessus 6.x before 6.11...7.4 High
- haxx curlcurl supports "globbing" of URLs, in which a user can pass a numerical range to have the tool...6.5 Medium
- haxx libcurlWhen doing a TFTP transfer and curl/libcurl is given a URL that contains a very long file name ...6.5 Medium
- haxx libcurlWhen asking to get a file from a file:// URL, libcurl provides a feature that outputs meta-data...6.5 Medium
tcmu-runnerSUSESecurity update for tcmu-runnerNo score- linux kernel, canonical ubuntu linux +1 moreIn /drivers/isdn/i4l/isdn_net.c: A user-controlled buffer is copied into a local buffer of...9.8 Critical
- google androidA elevation of privilege vulnerability in the Upstream Linux file system. Product: Android....7.8 High
- microsoft windows 7, windows server 2008, microsoft corporation windows kernel-mode drivers +2 moreWindows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow an attacker to execute code remotely...8.8 High
- Show moreLoading…