CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- mapsplugin googlemapsCross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla! allows...6.1 Medium
- freeipaFreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication...7.5 High
- ge ml810/3000/3100 series switch, multilink ml800/1200/1600/2400, multilink ml1200 firmware +6 more +8 moreGE Multilink Cross-site Scripting6.8
- mantisbtCross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20.6.1 Medium
- estrongs es file explorerDirectory traversal vulnerability in ES File Explorer 3.2.4.1.7.5 High
- fli4lHTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.7.2 High
- fli4lThe httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to...8.8 High
- xymonBuffer overflow in xymon 4.3.17-1.9.8 Critical
- ldap \/ sso authentication project \/ sso authenticationImproper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth)...9.8 Critical
- ppmd project ppmdDirectory traversal vulnerability in ppmd 10.1-5.7.5 High
- linux-ha haMultiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.7.5 High
- exponentcms exponent cmsCross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.6.1 Medium
- mobilis mobiconnectUntrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain...7.8 High
- oisf libhtplibhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).7.5 High
- ibm i access for windowsStack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1.7.8 High
- ibm business process managerCross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7...6.1 Medium
- smartcmsMultiple SQL injection vulnerabilities in SmartCMS v.2.9.8 Critical
- smartwebsites smartcmsMultiple cross-site scripting (XSS) vulnerabilities in SmartCMS v.2.6.1 Medium
- bmc footprints service coreCross-site scripting (XSS) vulnerability in BMC Footprints Service Core 11.5.6.1 Medium
- debian xbindkeys-configInsecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute...9.8 Critical
- gnu emacsEmacs 24.4 allows remote attackers to bypass security restrictions.7.5 High
- vbulletinCross-site scripting (XSS) vulnerability in vBulletin 3.5.4, 3.6.0, 3.6.7, 3.8.7, 4.2.2, 5.0.5,...6.1 Medium
- 10web photo galleryUnrestricted File Upload vulnerability in Photo Gallery 1.2.5.8.8 High
- ibm urbancode deployCross-site request forgery (CSRF) vulnerability in IBM UrbanCode Release 6.0.1.6 and earlier, 6.1...8.8 High
- sap hybrisDirectory traversal vulnerability in hybris Commerce software suite 5.0.3.3 and earlier, 5.0.0.3...7.5 High
- cit-e-net cit-e-accessMultiple cross-site scripting (XSS) vulnerabilities in Cit-e-Net Cit-e-Access 6.6.1 Medium
- barracuda load balancerPrivilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an...9.8 Critical
- barracuda load balancerHard coded weak credentials in Barracuda Load Balancer 5.0.0.015.9.8 Critical
- redhat satelliteRed Hat Satellite 6 allows local users to access mongod and delete pulp_database.6.1 Medium
- manageengine assetexplorer, it360, servicedesk plus +1 more +3 moreDirectory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030;...8.8 High
- manageengine assetexplorer, it360, servicedesk plus +1 more +3 moreDirectory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to...8.8 High
- good for enterpriseCross-site scripting (XSS) vulnerability in Good for Enterprise for Android 2.8.0.398 and 1.9.0.40.6.1 Medium
- redhat satelliteCross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.6.1 Medium
- ffmpegThe 'vp3_decode_frame' function in FFmpeg 1.1.4 moves threads check out of header packet type check.9.8 Critical
- ffmpegUnspecified vulnerability in FFMPEG 0.10 allows remote attackers to cause a denial of service.7.5 High
akonadiMageia,kdepim4Mageia,kdepim4-runtimeMageia +1 more +3 moreUpdated kmail(kdepimlibs4) packages fix security vulnerability and bugsNo score- openssl, debian linux +1 moreWhile parsing an IPAddressFamily extension in an X.509 certificate, it is possible to do a one...5.3 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreUse-after-free vulnerability in the DestroyImage function in image.c in ImageMagick before 7.0.6...6.5 Medium
- gnu binutilsThe setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as...7.5 High
- flightgearIn FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to...7.5 High
- axcient replibitPrivilege escalation in Replibit Backup Manager earlier than version 2017.08.04 allows attackers...9.8 Critical
- intel connman, debian linux +1 moreStack-based buffer overflow in "dnsproxy.c" in connman 1.34 and earlier allows remote attackers...9.8 Critical
- qpdf project qpdfThe tokenizer in QPDF 6.0.0 and 7.0.b1 is recursive for arrays and dictionaries, which allows...7.8 High
libmodplugMageiaUpdated libmodplug packages fix security vulnerabilitiesNo scoredbusMageiaUpdated dbus packages fix security vulnerabilitiesNo score- riverbed opnet app response xpertDirectory traversal vulnerability in viewer_script.jsp in Riverbed OPNET App Response Xpert (ARX)...6.5 Medium
- heimdal project heimdal, opensuse leap +1 moreThe transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath...7.5 High
- kaspersky internet security, kaspersky lab kaspersky internet security for android 11.12.4.1622 +1 moreIn Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were...7.5 High
- kaspersky internet security, kaspersky lab kaspersky internet security for android 11.12.4.1622 +1 moreIn Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities...9.8 Critical
- automatedlogic i-vu, sitescan web, carrier automatedlogic webctrl +2 moreAn Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic...7.8 High
- Show moreLoading…