CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- arubanetworks clearpassAruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote...7.2 High
- arubanetworks clearpassCross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before...8.8 High
- arubanetworks clearpassAruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote...7.2 High
- arubanetworks clearpassAruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote...7.2 High
- foxit reader, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- foxit reader, foxitsoftware foxit reader +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- bitdefender total security, zero day initiative bitdefender total security +1 moreThis vulnerability allows local attackers to execute arbitrary code on vulnerable installations...7.0 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_dequantize() in jpc/jpc_dec.c in JasPer...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function calcstepsizes() in jpc/jpc_dec.c in JasPer 2...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1296...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_pi_nextrpcl() in jpc/jpc_t2cod.c in...7.5 High
- jasper project jasper, debian linux, fedoraproject fedora +2 moreThere are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_floorlog2() in jpc/jpc_math.c in JasPer...7.5 High
- jasper project jasper, fedoraproject fedora +1 moreThere is a reachable assertion abort in the function jpc_dec_process_siz() in jpc/jpc_dec.c:1297...7.5 High
- jasper project jasperThere is a reachable assertion abort in the function jpc_dec_process_sot() in jpc/jpc_dec.c in...7.5 High
- liblouisThere is a buffer overflow in Liblouis 3.2.0, triggered in the function _lou_showString() in...6.5 Medium
- liblouisThere is a use-after-free in the function compileBrailleIndicator() in compileTranslationTable.c...6.5 Medium
- graphicsmagick, debian linux +1 moreThere is an invalid free in the MagickFree function in magick/memory.c in GraphicsMagick 1.3.26...6.5 Medium
- graphicsmagickThere are lots of memory leaks in the GMCommand function in magick/command.c in GraphicsMagick 1...6.5 Medium
- invisible-island ncursesThere is an illegal address access in the _nc_safe_strcat function in strings.c in ncurses 6.0...6.5 Medium
- invisible-island ncursesThere is an illegal address access in the fmt_entry function in progs/dump_entry.c in ncurses 6.0...6.5 Medium
- invisible-island ncursesThere is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6...6.5 Medium
- invisible-island ncursesThere is an illegal address access in the function postprocess_termcap() in parse_entry.c in...6.5 Medium
- invisible-island ncursesThere is an illegal address access in the function _nc_read_entry_source() in progs/tic.c in...6.5 Medium
- invisible-island ncursesThere is an illegal address access in the _nc_save_str function in alloc_entry.c in ncurses 6.0....6.5 Medium
- invisible-island ncursesThere is an infinite loop in the next_char function in comp_scan.c in ncurses 6.0, related to...7.5 High
- imagemagickIn ImageMagick 7.0.6-10, there is a heap-based buffer overflow in the TracePoint() function in...6.5 Medium
- liblouisThere is an illegal address access in the function _lou_getALine() in compileTranslationTable.c...6.5 Medium
- liblouisThere is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function includeFile()...6.5 Medium
- liblouisThere is a stack-based buffer overflow in Liblouis 3.2.0, triggered in the function parseChars()...8.8 High
- liblouisThere is a heap-based buffer overflow that causes a more than two thousand bytes out-of-bounds...8.8 High
- liblouisThere is an illegal address access in the _lou_getALine function in compileTranslationTable.c:346...8.8 High
- librawThere is a floating point exception in the kodak_radc_load_raw function in dcraw_common.cpp in...7.5 High
- libtiffThere is a reachable assertion abort in the function TIFFWriteDirectoryTagSubifd() in LibTIFF 4.0...6.5 Medium
- libtiffThere is a reachable assertion abort in the function TIFFWriteDirectorySec() in LibTIFF 4.0.8,...6.5 Medium
- sqliteThe dump_callback function in SQLite 3.20.0 allows remote attackers to cause a denial of service ...5.5 Medium
- imagemagickThe WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a...6.5 Medium
- gnupg libgcrypt, debian linux +1 moreLibgcrypt before 1.8.1 does not properly consider Curve25519 side-channel attacks, which makes it...7.5 High
- gnu binutilsThe C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29...5.5 Medium
- huawei vcm5010 firmware, vcm5020 firmware +1 moreHuawei Video Content Management (VCM) before V100R001C10SPC001 does not properly "authenticate...8.8 High
- polycom btoe connectorPolycom BToE Connector before 3.0.0 uses weak permissions (Everyone: Full Control) for "Program...7.8 High
- emc elan touchpad driver, lenovo group ltd. elantech touchpad driver +1 moreAn unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad,...7.8 High
- lenovo thinkpad usb 3.0 ethernet adapter driverThinkPad USB 3.0 Ethernet Adapter (part number 4X90E51405) driver, various versions, was found to...7.8 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreDirectory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application...4.9 Medium
- nippon telegraph and telephone west corporation flets setsuzoku tool for windows, ntt flets setsuzoku tool +1 moreUntrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an...7.8 High
- ibm security access manager, security access manager for web, security access manager for mobile +3 more +5 moreIBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by...6.1 Medium
- Show moreLoading…