CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- atlassian fisheye and crucible, crucible, fisheye +2 moreVarious resources in Atlassian Fisheye and Crucible before version 4.4.1 allow remote attackers...5.4 Medium
- atlassian crucible, fisheye +1 moreThe review dashboard resource in Atlassian Crucible from version 4.1.0 before version 4.4.1...5.4 Medium
- nexusphpSQL Injection exists in NexusPHP 1.5.beta5.20120707 via the setanswered parameter to staffbox.php.9.8 Critical
- nexusphpSQL Injection exists in NexusPHP 1.5.beta5.20120707 via the delcheater parameter to cheaterbox.php.9.8 Critical
- xen, citrix xenserver, debian linux +2 morearch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors...8.8 High
- xen, citrix xenserver, debian linux +2 moreRace condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS...7.8 High
- xen, citrix xenserver, debian linux +2 moreXen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive...8.8 High
openjpeg2MageiaUpdated openjpeg2 packages fix security vulnerabilitiesNo score- multicorewareinc x265An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for...5.5 Medium
- imagemagickIn ImageMagick before 6.9.9-3 and 7.x before 7.0.6-3, there is a missing NULL check in the...6.5 Medium
- xen, citrix xenserver +1 moreThe xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS...8.8 High
- pyjwt project pyjwt, debian linux +1 morePyJWT vulnerable to key confusion attacks7.5 High
- google androidA elevation of privilege vulnerability in the Android media framework (libstagefright). Product:...7.8 High
- unrealircdUnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account,...5.5 Medium
- graphicsmagickIn GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in...6.5 Medium
- nagiosNagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root...6.3 Medium
- atlassian oauth plugin, oauth +1 moreThe IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and...6.1 Medium
- graphicsmagickIn GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function...8.8 High
- progress telerik ui for asp.net ajax, telerik user interface (ui) for asp.net ajax +1 moreProgress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to...9.8 Critical
- telerik ui for asp.net ajax, user interface (ui) for asp.net ajax +1 moreTelerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2...9.8 Critical
- apache2triadCross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject...6.1 Medium
- apache2triadCross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to...8.8 High
- apache2triadSession fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web...9.8 Critical
- synology photo station uploaderMultiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader...7.8 High
- qodeinteractive bridgeDOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress...6.1 Medium
- formcrafts formcraftThe FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php.9.8 Critical
- libzipDouble free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows...9.8 Critical
- icewarp mail serverCross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows...4.8 Medium
- saltstack saltSaltStack Salt Directory traversal vulnerability in minion id validation9.8 Critical
- imagemagickIn ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage...8.8 High
- imagemagickIn ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak...6.5 Medium
- imagemagickIn ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-8, the load_level function in coders/xcf.c lacks offset validation, which...6.5 Medium
- imagemagickIn ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c...6.5 Medium
- imagemagickIn ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit"...6.5 Medium
- imagemagickIn ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c...7.5 High
- imagemagickIn ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png...9.8 Critical
- bmc patrolmcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the...7.8 High
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows...6.5 Medium
- ibm maas360 dtmIBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of...3.3 Low
- redhat jboss enterprise application platformGet requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to...5.3 Medium
- redhat enterprise virtualizationoVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine...5.5 Medium
- apache pony mailApache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.9.8 Critical
- haproxyHAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.5.3 Medium
- wago 750-849 firmware, 758-870 firmware +1 moreWAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.9.8 Critical
- wago 750-849 firmware, 750-881 firmware, 758-870 firmware +2 moreWAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential...9.8 Critical
- fedoraproject fedora, vmware spring social +1 morespringframework-social Cross-Site Request Forgery vulnerability8.8 High
- noviflow noviwareA network interface of the novi_process_manager_daemon service, included in the NoviWare software...9.8 Critical
- Show moreLoading…