CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- ibm curam social program management, cram social program management +1 moreIBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to...6.1 Medium
- hcl sametimeThe Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site...6.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache...3.3 Low
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously...4.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- hcl sametimeIBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose...3.3 Low
- hcl sametimeIBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- hcl sametimeIBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by...4.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is...5.3 Medium
- hcl sametimeIBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat...4.3 Medium
- apache atlasCross-site Scripting in Apache Atlas6.1 Medium
- apache atlasApache Atlas produces Stack trace in error response7.5 High
- apache atlasCross-site Scripting in Apache Atlas6.1 Medium
- apache atlasCross-site Scripting in Apache Atlas6.1 Medium
- apache atlasCross-site Scripting in Apache Atlas6.1 Medium
- apache atlasInsecure cookie storage in Apache Atlas6.1 Medium
- apache atlasPath Traversal in Apache Atlas7.5 High
- mapsplugin googlemapsCross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!.6.1 Medium
- mapsplugin googlemapsThe Googlemaps plugin before 3.1 for Joomla! allows remote attackers to bypass an intended...7.5 High
- mapsplugin googlemapsFull path disclosure in the Googlemaps plugin before 3.1 for Joomla!.5.3 Medium
- kamailioInsecure Temporary file vulnerability in /tmp/kamailio_fifo in kamailio 4.0.1.9.8 Critical
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This...5.4 Medium
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands...4.3 Medium
- hcl sametimeIBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This...5.4 Medium
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user...7.8 High
- hcl sametimeIBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error...5.3 Medium
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that...4.3 Medium
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by...6.5 Medium
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the...4.3 Medium
- hcl sametimeIBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of...4.3 Medium
- hcl sametimeIBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has...6.5 Medium
- hcl sametimeIBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has...6.5 Medium
- hcl sametimeIBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload...5.5 Medium
- qemuThe vga display update in mis-calculated the region for the dirty bitmap snapshot in case split...6.5 Medium
- simplesamlphpSimpleSAMLphp Invalid token creation and validation5.9 Medium
- c.p.sub project c.p.subCross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject...6.1 Medium
- mpg123Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5...5.5 Medium
- question2answerqa-include/qa-install.php in Question2Answer before 1.7.5 allows remote attackers to create...7.5 High
- nomachineAn unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows...8.8 High
- netapp storagegrid webscaleNetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10...6.5 Medium
- ivanti connect secure, pulsesecure pulse connect secure, pulse policy secure +2 morediag.cgi in Pulse Connect Secure 8.2R1 through 8.2R5, 8.1R1 through 8.1R10 and Pulse Policy...8.8 High
- huawei vcn500 firmwareSQL injection vulnerability in the Operation and Maintenance Unit (OMU) in Huawei VCN500 before...8.8 High
- knx etsBuffer overflow in the Group messages monitor (Falcon) in KNX ETS 4.1.5 (Build 3246) allows...9.8 Critical
- labwebdesigns double opt-in for downloadMultiple SQL injection vulnerabilities in the Double Opt-In for Download plugin before 2.0.9 for...9.8 Critical
- zte gan9.8t101a-b firmware, hg110 firmware, mf28g firmware +3 more +5 moreZTE OX-330P, ZXHN H108N, W300V1.0.0S_ZRD_TR1_D68, HG110, GAN9.8T101A-B, MF28G, ZXHN H108N use non...7.5 High
- coremail xtCross-site scripting (XSS) vulnerability in Coremail XT3.0 allows remote attackers to inject...6.1 Medium
- modx revolutionCross-site scripting (XSS) vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows...6.1 Medium
- apache strutsSpecial top object can be used to access Struts' internals7.5 High
- arubanetworks clearpassAruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote...7.2 High
- arubanetworks clearpassAruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote...7.2 High
- Show moreLoading…