CVEs published in August 2017
1,501 vulnerabilities, 244 critical, 6 exploited.
- ibm emptoris services procurementIBM Emptoris Services Procurement 10.0.0.5 could allow a local user to view sensitive information...5.5 Medium
- ibm emptoris services procurementIBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary...8.8 High
- crushftpCrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.6.1 Medium
- crushftpCrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.6.1 Medium
- crushftpCrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.6.1 Medium
- crushftpCrushFTP 8.x before 8.2.0 has a serialization vulnerability.9.8 Critical
- arm mbed tlsARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows...8.1 High
- synology cloud station backupMultiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Backup...7.8 High
- siemens 7km pac switched ethernet profinet expansion module firmwareIn the Siemens 7KM PAC Switched Ethernet PROFINET expansion module (All versions < V2.1.3), a...6.5 Medium
- siemens logo! 8 bm (incl. siplus variants), logo\! 8 bm firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3)....7.4 High
- siemens logo! 8 bm (incl. siplus variants), logo\!8 bm fs-05 firmware +1 moreA vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V1.81.2...7.5 High
- ocpfoundation local discovery server, ua .net, siemens simatic pcs7 +1 more +3 moreAn XXE vulnerability has been identified in OPC Foundation UA .NET Sample Code before 2017-03-21...8.2 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop5.5 Medium
- advantech webaccessAn Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to...7.8 High
- advantech webaccessAn Incorrect Permission Assignment for Critical Resource issue was discovered in Advantech...7.8 High
- advantech webaccessAn Incorrect Privilege Assignment issue was discovered in Advantech WebAccess versions prior to...7.8 High
- advantech webaccessA SQL Injection issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. By...7.5 High
- advantech webaccessAn Improper Restriction Of Operations Within The Bounds Of A Memory Buffer issue was discovered...9.8 Critical
- advantech webaccessA stack-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8...9.8 Critical
- advantech webaccessA heap-based buffer overflow issue was discovered in Advantech WebAccess versions prior to V8...8.8 High
- advantech webaccessAn Externally Controlled Format String issue was discovered in Advantech WebAccess versions prior...8.8 High
- advantech webaccessAn Improper Authentication issue was discovered in Advantech WebAccess versions prior to V8...9.8 Critical
- eyesofnetworkThe EyesOfNetwork web interface (aka eonweb) 5.1-0 allows directory traversal attacks for reading...7.5 High
- apache ofbizThe default configuration of the Apache OFBiz framework offers a blog functionality. Different...6.1 Medium
- apache ofbizBy manipulating the URL parameter externalLoginKey, a malicious, logged in user could pass valid...8.8 High
- fiyo cmsFiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.6.1 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex...6.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has a denial of service issue in ReadXBMImage() in a coders/xbm.c "Read hex...6.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has a denial of service issue in ReadJNXImage() in coders/jnx.c whereby...6.5 Medium
- hikvision ivms-4200Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes...7.8 High
- wiresharkIn Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the MSDP dissector could go into an...7.5 High
- wiresharkIn Wireshark 2.4.0 and 2.2.0 to 2.2.8, the Profinet I/O dissector could crash with an out-of...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0, 2.2.0 to 2.2.8, and 2.0.0 to 2.0.14, the IrCOMM dissector has a buffer over...7.5 High
- wiresharkIn Wireshark 2.4.0, the Modbus dissector could crash with a NULL pointer dereference. This was...7.5 High
- uclouvain openjpegInteger overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2...6.5 Medium
- uclouvain openjpegDivision-by-zero vulnerabilities in the functions opj_pi_next_cprl, opj_pi_next_pcrl, and...6.5 Medium
- uclouvain openjpegNULL pointer dereference vulnerabilities in the imagetopnm function in convert.c, sycc444_to_rgb...6.5 Medium
- uclouvain openjpegHeap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreThe WriteTHUMBNAILImage function in coders/thumbnail.c in ImageMagick through 7.0.6-10 allows an...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreNull Pointer Dereference in the IdentifyImage function in MagickCore/identify.c in ImageMagick...6.5 Medium
- onosproject onosONOS vulnerable to denial of service due to unrestricted NettyMessagingManager payload7.5 High
- onosproject onosONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.6.1 Medium
- sleuthkit the sleuth kit, debian linux +1 moreIn The Sleuth Kit (TSK) 4.4.2, fls hangs on a corrupt exfat image in tsk_img_read() in tsk/img...5.5 Medium
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does...5.5 Medium
- sleuthkit the sleuth kit, debian linux +1 moreIn The Sleuth Kit (TSK) 4.4.2, opening a crafted disk image triggers infinite recursion in...5.5 Medium
- sleuthkit the sleuth kit, debian linux +1 moreIn The Sleuth Kit (TSK) 4.4.2, opening a crafted ISO 9660 image triggers an out-of-bounds read in...5.5 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the...6.1 Medium
- ibm cognos analyticsIBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users...6.1 Medium
- Show moreLoading…