CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- resiprocateBuffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate...7.5 High
- aptus styra porttelefonkort 4400 firmwareUnspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown...9.8 Critical
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.9.8 Critical
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.9.8 Critical
- rarlab unrarlibunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call...9.8 Critical
- openstackOpenstack Aodh can be used to launder Keystone trusts7.5 High
- phpgridDirectory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. phpGrid before 7.2.5...7.8 High
- kddi corporation installer of qua station connection tool for windows, kddi qua station firmware +1 moreUntrusted search path vulnerability in Installer of Qua station connection tool for Windows...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) teikihoukokusho sakuseishien toolUntrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker...7.8 High
- unity3d unity editorA Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g...9.8 Critical
- rarlab unrarUnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism...7.5 High
- teikoku databank, ltd. tdb ca typea use software, teikoku databank type a +1 moreUntrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier,...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) installer for shin kinkyuji houkoku data nyuryoku program (program released on 2011 march 10), enecho.meti shin kinkyuji houkoku data nyuryoku program +1 moreUntrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program ...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) installer for shin sekiyu yunyu chousa houkoku data nyuryoku program (program released on 2013 september 30), enecho.meti shin sekiyu yunyu chousa houkoku data nyuryoku program +1 moreUntrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data...7.8 High
- agency for natural resources and energy of ministry of economy,trade and industry (meti) installer for shin kikan toukei houkoku data nyuryokuyou program (program released on 2013 september 30), enecho.meti shin kikan toukei houkoku data nyuryokuyou program +1 moreUntrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou...7.8 High
- buffalo inc. wcr-1166ds, buffalo wcr-1166ds firmware +1 moreBuffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary...6.8 Medium
- graphicsmagick, debian linux +1 moreThe ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based...8.8 High
- graphicsmagick, debian linux +1 moreThe ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for...8.8 High
- graphicsmagick, debian linux +1 moreThe ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images,...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe destructor function for the "WindowsDllDetourPatcher" class can be re-purposed by malicious...7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreAn error in the "WindowsDllDetourPatcher" where a RWX ("Read/Write/Execute") 4k block is...5.3 Medium
- phpext/standard/var_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a...7.5 High
- phpext/standard/var_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to...9.8 Critical
- cactiA cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill...6.1 Medium
- libtiffThe TIFFReadDirEntryArray function in tif_read.c in LibTIFF 4.0.8 mishandles memory allocation...7.5 High
- newsbeuter, debian linux +1 moreImproper Neutralization of Special Elements used in an OS Command in bookmarking function of...8.8 High
firefoxUbuntufirefox regressionNo score- cisco telepresence video communication server, cisco systems, inc. telepresence video communication server (vcs) +1 moreA vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video...6.8 Medium
- cisco anyconnect secure mobility client, cisco systems, inc. anyconnect weblaunch +1 moreThe WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a...6.1 Medium
- cisco elastic services controllerA vulnerability in Cisco Elastic Services Controller could allow an authenticated, local,...6.3 Medium
- cisco unified communications managerA vulnerability in configuration modification permissions validation for Cisco Unified...4.3 Medium
- cisco systems, inc. rv340, rv345, and rv345p dual wan gigabit vpn routers, cisco small business rv340 firmware, small business rv345 firmware +1 more +3 moreA vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN...5.3 Medium
- cisco content security management appliance, email security appliance, web security appliance +3 more +5 moreA vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security...4.3 Medium
- cisco prime infrastructureA vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an...5.4 Medium
- cisco policy suiteA vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software...5.3 Medium
- cisco ultra services platformA vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra...6.5 Medium
- cisco elastic services controllerA vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an...4.9 Medium
- cisco elastic services controllerA vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an...6.1 Medium
- cisco asr 5000 software, cisco systems, inc. staros for asr 5000 series aggregated services routers +1 moreA vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco...5.7 Medium
- cisco asr 5000 software, cisco systems, inc. staros for asr 5000 series aggregated services routers +1 moreA vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS...5.0 Medium
- cisco asr 5000 software, cisco systems, inc. staros for asr 5000 series aggregated services routers +1 moreA vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco...6.7 Medium
- cisco elastic services controllerA vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote...4.3 Medium
- cisco ultra services frameworkA vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow...7.5 High
- cisco application policy infrastructure controller, cisco systems, inc. application policy infrastructure controller (apic) +1 moreA vulnerability in the build procedure for certain executable system files installed at boot time...7.8 High
- cisco application policy infrastructure controller, cisco systems, inc. application policy infrastructure controller (apic) +1 moreA vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an...7.1 High
- cisco systems, inc. virtual network function (vnf) element manager, cisco virtual network function element manager +1 moreA vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an...8.1 High
- nexusphp project nexusphpSQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute...9.8 Critical
- nexusphp project nexusphpSQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute...9.8 Critical
- nexusphp project nexusphpSQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute...9.8 Critical
- nexusphp project nexusphpCross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.6.1 Medium
- Show moreLoading…