CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- adobe acrobat, acrobat reader, reader +2 more +4 moreAdobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...8.8 High
- adobe acrobat, acrobat reader, reader +2 more +4 moreAdobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...8.8 High
- adobe acrobat, acrobat reader, reader +2 more +4 moreAdobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...8.8 High
- adobe acrobat, acrobat reader, reader +2 more +4 moreAdobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...6.5 Medium
- adobe acrobat, acrobat reader, reader +2 more +4 moreAdobe Acrobat Reader 2017.009.20058 and earlier, 2017.008.30051 and earlier, 2015.006.30306 and...6.5 Medium
- synology chatServer-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0...6.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android release from CAF using the Linux kernel, while processing...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreOut of bound memory write can happen in the MDSS Rotator driver in all Qualcomm products with...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreUserspace-controlled non null terminated parameter for IPA WAN ioctl in all Qualcomm products...5.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreA userspace process can cause a Denial of Service in the camera driver in all Qualcomm products...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn the service locator in all Qualcomm products with Android releases from CAF using the Linux...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreAn array out-of-bounds access in all Qualcomm products with Android releases from CAF using the...5.5 Medium
- strongswanThe gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service ...7.5 High
- apache tomcatImproper Limitation of a Pathname to a Restricted Directory in Apache Tomcat7.5 High
- microsoft chakracoreChakraCore RCE Vulnerability9.8 Critical
- apache tomcatImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat7.5 High
- fortinet fortiweb, fortinet, inc. fortinet fortiweb +1 moreAn information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows...4.9 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreAn information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions...7.5 High
- microsoft edgeMicrosoft Edge allows a remote code execution vulnerability due to the way it accesses objects in...7.5 High
- apache cxfCovert Timing Channel in Apache CXF7.5 High
- gnu binutilsThe elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a...7.8 High
- nexusphp project nexusphpCross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.6.1 Medium
- apache cxfImproper Restriction of XML External Entity Reference in Apache CXF JAX-RS7.5 High
- linux kernelLinux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a...7.0 High
- debian linux, linux kernel, redhat enterprise linux +6 more +8 moreLinux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously...7.8 High
- apache cxfImproper Neutralization of Input During Web Page Generation in Apache CXF6.1 Medium
- ibm infosphere streams, streams +1 moreIBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm runbook automationIBM Runbook Automation reveals sensitive information in error messages that could be used in...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack...8.2 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote...8.8 High
- ibm rational engineering lifecycle managerIBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site...5.4 Medium
- apache subversionA maliciously constructed svn+ssh:// URL would cause Subversion clients before 1.8.19, 1.9.x...9.8 Critical
- mozilla firefox, thunderbird, debian linux +6 more +8 moreA use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during...9.8 Critical
- mozilla firefoxA content security policy (CSP) "frame-ancestors" directive containing origins with paths allows...5.3 Medium
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files...8.1 High
- mozilla firefoxA use-after-free vulnerability can occur when the layer manager is freed too early when rendering...7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreWhen a page's content security policy (CSP) header contains a "sandbox" directive, other...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur when manipulating the DOM during the resize event of an...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur while re-computing layout for a "marquee" element during...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in WebSockets when the object holding the connection is...9.8 Critical
- mozilla firefoxJavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML"....6.1 Medium
- mozilla firefox, firefox esr, debian linux +6 more +8 moreThe Developer Tools feature suffers from a XUL injection vulnerability due to improper...8.8 High
- mozilla firefoxResponse header name interning does not have same-origin protections and these headers are stored...7.5 High
- mozilla firefoxOn Linux systems, if the content process is compromised, the sandbox broker will allow files to...7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow will occur when viewing a certificate in the certificate manager if the...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreOn pages containing an iframe, the "data:" protocol can be used to create a modal alert that will...5.3 Medium
- mozilla firefoxWhen an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreSame-origin policy protections can be bypassed on pages with embedded iframes during page reloads...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when the image renderer attempts to paint non-displayable SVG...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA)...9.8 Critical
- Show moreLoading…