CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- hawt hawtioCross-Site Request Forgery in hawtio8.8 High
- minidjvu project minidjvuThe JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause...6.5 Medium
- minidjvu project minidjvuThe mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial...6.5 Medium
- minidjvu project minidjvuThe mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of...6.5 Medium
- minidjvu project minidjvuThe row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service ...6.5 Medium
- minidjvu project minidjvuThe row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service ...6.5 Medium
- mindwerks wildmidiThe _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of...6.5 Medium
- mindwerks wildmidiThe _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of...6.5 Medium
- mindwerks wildmidiThe _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service ...7.5 High
- mindwerks wildmidiThe _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of...7.5 High
- micro focus opensuseCode injection in openSUSE when running some source services used in the open build service 2.1...9.8 Critical
- augeasAugeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to...9.8 Critical
- phpThe finish_nested_data function in ext/standard/var_unserializer.re in PHP before 5.6.31, 7.0.x...9.8 Critical
- oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....6.5 Medium
- oracle mysql, debian linux, mariadb +14 more +16 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....6.5 Medium
- oracle mysql, mariadb, netapp active iq unified manager +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)....4.4 Medium
- foxitsoftware pdf compressorFoxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading...7.8 High
- 389 directory server 389-ds-base, fedoraproject 389 directory server +1 more389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks...9.8 Critical
- qualcomm, inc. telephony, apple iphone os +1 moreA buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as...9.8 Critical
- google android, qualcomm, inc. all qualcomm products +1 moreA buffer overflow can occur in all Qualcomm products with Android for MSM, Firefox OS for MSM, or...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn the touch controller function in all Qualcomm products with Android for MSM, Firefox OS for...8.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD...7.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreWhen a control related to codec is issued from userspace in all Qualcomm products with Android...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD...8.8 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD...4.7 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a...4.7 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android,...4.7 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn an audio driver in all Qualcomm products with Android releases from CAF using the Linux kernel...7.0 High
- google android, qualcomm, inc. all qualcomm products +1 moreIn all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data...4.7 Medium
ubufoxUbuntuubufox updateNo scorelinuxUbuntu,linux-awsUbuntu,linux-gkeUbuntu +2 more +4 morelinux, linux-aws, linux-gke, linux-raspi2, linux-snapdragon regressionNo scorelinux-lts-xenialUbuntulinux-lts-xenial regressionNo scoremingw-nsisMageiaUpdated mingw-nsis packages fix security vulnerabilityNo score- microsoft xamarin.iosThe Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary...7.8 High
- opencv, debian linux +1 moreInteger Overflow or Wraparound in OpenCV8.8 High
- opencv, debian linux +1 moreInteger Overflow or Wraparound in OpenCV8.8 High
- opencv, debian linux +1 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV8.8 High
- xenXen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in...6.5 Medium
- numpyNumpy missing input validation7.5 High
- ibm infosphere information serverIBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated...7.8 High
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with...6.4 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to...5.9 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 is vulnerable to cross-site...5.4 Medium
- gitlabGitLab Community Edition (CE) and Enterprise Edition (EE) before 8.17.8, 9.0.x before 9.0.13, 9.1...8.8 High
- rtsindia rwr-3g-100 firmwareThe RealTime RWR-3G-100 Router Firmware Version : Ver1.0.56 is affected by CSRF an attack that...8.8 High
- kanboardAn authenticated standard user could reset the password of the admin by altering form data....8.8 High
- Show moreLoading…