CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- noviflow noviwareNetwork interfaces of the cliengine and noviengine services, included in the NoviWare software...9.8 Critical
- noviflow noviwareThe novish command-line interface, included in the NoviWare software distribution through NW400.2...9.8 Critical
- fortinet fortimanager firmwareFortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges...7.8 High
- accellion file transfer applianceAccellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute...9.8 Critical
- ibm security network protection 3100 firmware, security network protection 4100 firmware, security network protection 5100 firmware +1 more +3 moreCross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and...6.1 Medium
- powerdns dnsdistdnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API...8.8 High
- cyrusimap cyrus imap, fedoraproject fedora +1 moreCyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a...6.5 Medium
- graphicsmagickGraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.6.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function...6.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function...6.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in...6.5 Medium
- cloudfoundry capi-release, cf-release, cloud foundry +2 moreIn Cloud Foundry Foundation CAPI-release versions after v1.6.0 and prior to v1.38.0 and cf...7.5 High
avidemuxMageiaUpdated avidemux packages fix security vulnerabilitiesNo scorephp-pear-CASMageiaUpdated php-pear-CAS package fixes security vulnerabilityNo score- symantec vip access for desktopSymantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading...7.8 High
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreA Path Traversal (CWE-22) vulnerability in esfadmingui in Micro Focus Enterprise Developer and...6.5 Medium
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreA Cross-Site Request Forgery (CWE-352) vulnerability in esfadmingui in Micro Focus Enterprise...8.8 High
- microfocus enterprise developer, enterprise server, micro focus enterprise developer, micro focus enterprise server +2 moreReflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in esfadmingui in Micro...5.4 Medium
- microfocus directory server, enterprise developer, enterprise server +2 more +4 moreReflected and stored Cross-Site Scripting (XSS, CWE-79) vulnerabilities in Directory Server (aka...6.1 Medium
- microfocus enterprise developer, enterprise server, enterprise server monitor and control +1 more +3 moreAn Authentication Bypass (CWE-287) vulnerability in ESMAC (aka Enterprise Server Monitor and...9.8 Critical
- microfocus directory server, enterprise developer, enterprise server +2 more +4 moreA Cross-Site Request Forgery (CWE-352) vulnerability in Directory Server (aka Enterprise Server...8.8 High
- phpmywindPHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin...6.1 Medium
- uclouvain openjpegThe bmp_read_info_header function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject...5.5 Medium
- nexusphpNexusPHP 1.5.beta5.20120707 has SQL Injection in forummanage.php via the sort parameter in an...9.8 Critical
- dokuwikiDokuWiki through 2017-02-19c has stored XSS when rendering a malicious RSS or Atom feed, in /inc...6.1 Medium
- dokuwikiDokuWiki through 2017-02-19c has stored XSS when rendering a malicious language name in a code...6.1 Medium
- cactilib/html.php in Cacti before 1.1.18 has XSS via the title field of an external link added by an...5.4 Medium
- ccfile cc file transferIn Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is...7.5 High
- 10web photo galleryThe Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for...7.2 High
- codiadCodiad Vulnerable to Shell Command Injection9.8 Critical
- imagemagickHeap-based buffer overflow in the ReadSFWImage function in coders/sfw.c in ImageMagick 7.0.6-8...8.8 High
- git-annex project git-annexgit-annex before 6.20170818 allows remote attackers to execute arbitrary commands via an ssh URL...8.8 High
- connect2id nimbus jose\+jwtImproper Verification of Cryptographic Signature in Nimbus JOSE+JWT7.5 High
- connect2id nimbus jose\+jwtNimbus JOSE+JWT vulnerable to padding oracle attack3.1 Low
- connect2id nimbus jose\+jwtNimbus JOSE+JWT missing overflow check7.5 High
- asn1c project asn1cThe asn1f_lookup_symbol_impl function in asn1fix_retrieve.c in libasn1fix.a in asn1c 0.9.28...6.5 Medium
- gnu binutilsThe getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as...6.5 Medium
- estsoft alzipStack-based buffer overflow in ESTsoft ALZip 8.51 and earlier allows remote attackers to execute...7.8 High
fossilMageiaUpdated fossil package fixes security vulnerabilityNo score- mercurial, debian linux, redhat enterprise linux desktop +5 more +7 moreMercurial is vulnerable to shell injection attack9.8 Critical
- mercurial, debian linux, redhat enterprise linux desktop +5 more +7 moreMercurial missing symlink check7.5 High
- linux kernelThe sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not...7.8 High
- debian linux, linux kernel, redhat enterprise linux +3 more +5 moreRace condition in fs/timerfd.c in the Linux kernel before 4.10.15 allows local users to gain...7.0 High
- Show moreLoading…