CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 moreAn Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC...7.0 High
- automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 moreA Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu,...6.3 Medium
- osisoft pi data archiveAn Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive...5.9 Medium
- osisoft pi data archiveAn Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive...7.4 High
- osisoft pi web apiA Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1...8.8 High
- polycom unified communications softwarePolycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0...8.8 High
- spidercontrol scada microbrowserA Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1...9.8 Critical
- ininet solutions gmbh spidercontrol scada web server, spidercontrol scada web server +1 moreA Directory Traversal issue was discovered in SpiderControl SCADA Web Server. An attacker may be...7.5 High
- tug texlivemktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to...6.1 Medium
- phpmybackupproDirectory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote...7.5 High
- phpmybackupproDirectory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote...7.5 High
- saltstack saltSalt vulnerable to Improper Certificate Validation7.5 High
- zend diactoroszend-diactoros Cross-site Scripting (XSS)6.1 Medium
- php-fpmphp-fpm allows local users to write to or create arbitrary files via a symlink attack.5.5 Medium
- ibm en6131 firmware, ib6131 firmware +1 moreCRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband...6.1 Medium
- d-link dns-320l firmware, dns-327l firmware +1 moreThe web/web_file/fb_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1...5.3 Medium
- d-link dnr-320l firmware, dnr-326 firmware, dns-320lw firmware +2 more +4 moreStack-based buffer overflow in login_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1...9.8 Critical
- d-link dnr-326 firmwareThe check_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass...9.8 Critical
- d-link dns-320l firmware, dnr-326 firmware, dns-320b firmware +4 more +6 moreD-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS...9.8 Critical
- finecms project finecmscontrollers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.6.1 Medium
- westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 moreA Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0,...5.3 Medium
- westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 moreA Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older...8.8 High
- westermo mrd-305-din firmware, mrd-315-din firmware, mrd-355-din firmware +1 more +3 moreA Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7...7.5 High
- [unknown] satelliteA cross-site scripting (XSS) flaw was found in how an organization name is displayed in Satellite...3.5 Low
- linux kernelThe acpi_ps_complete_final_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel...5.5 Medium
- linux kernelThe acpi_ds_create_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel...5.5 Medium
- htacg tidyIn Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of...7.5 High
- linux kernelThe acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12...5.5 Medium
- tug texlivemktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write...6.1 Medium
- linux kernelnet/ipv4/route.c in the Linux kernel 4.13-rc1 through 4.13-rc6 is too late to check for a NULL fi...7.8 High
- orion-soft bitrixMultiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for...8.8 High
- zen-cart zen cartDirectory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and...9.8 Critical
- cloud4wi splash portalCross-site scripting (XSS) vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows...6.1 Medium
- lxdm project lxdmLXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass...7.8 High
- samsung mobileLibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a...6.5 Medium
- onosproject onosONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service ...7.5 High
- zte zxv10 w300 firmwareZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts...8.8 High
- zte zxv10 w300 firmwareZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote...8.8 High
- zte zxv10 w300 firmwareZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote...7.5 High
- redhat enterprise virtualization managerRed Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to...5.9 Medium
- samsung galaxy s4 firmwareThe samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier...9.8 Critical
- samsung galaxy s4 firmwareThe samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier...7.5 High
- synology photo stationCross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station...5.4 Medium
- misp-project mispapp/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only...6.1 Medium
- paessler prtg network monitorCross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in...5.4 Medium
- atlassian fisheye and crucible, crucible, fisheye +2 moreThe MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows...7.5 High
- synology dns serverDirectory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS...6.5 Medium
- atlassian fisheye and crucible, crucible, fisheye +2 moreThe mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1...7.5 High
- atlassian fisheyeThe repository changelog resource in Atlassian Fisheye before version 4.4.1 allows remote...5.4 Medium
- atlassian crucible, fisheye +1 moreThe review file upload resource in Atlassian Crucible before version 4.4.1 allows remote...5.4 Medium
- Show moreLoading…