CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- technicolor td5336 firmwareCommand Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices...9.8 Critical
- xnau participants databaseThe Participants Database plugin before 1.7.5.10 for WordPress has XSS.6.1 Medium
- zohocorp manageengine firewall analyzerZoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the ...8.8 High
- rarlab unrar, debian linux +1 moreunrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a stack-based buffer over-read in unrarlib...9.1 Critical
- rarlab unrar, debian linux +1 moreThe DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from...5.5 Medium
- rarlab unrar, debian linux +1 moreunrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for...7.5 High
- eyesofnetworkIn the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\snmpwalk.php does...8.8 High
- eyesofnetworkIn the EyesOfNetwork web interface (aka eonweb) 5.1-0, module\tool_all\tools\interface.php does...8.8 High
- att u-verse firmwareThe AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough...5.9 Medium
- att u-verse firmwareThe AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not...8.1 High
- att u-verse firmwareThe AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough...8.1 High
- att u-verse firmwareThe AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices,...8.1 High
enigmailDebianenigmail - security updateNo score- rtpproxyRTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining...6.5 Medium
- digium asterisk, certified asterisk +1 moreIn Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified...9.8 Critical
- digium asterisk, certified asterisk +1 moreIn res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before...7.5 High
- digium asteriskIn the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a...7.5 High
wiresharkMageiaUpdated wireshark packages fix security vulnerabilitiesNo score- netapp oncommand unified manager for clustered data ontapNetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure...7.5 High
- simplesamlphp infocard module, debian linux +1 moreSimpleSAMLphp InfoCard module Incorrect signature verification7.5 High
- simplesamlphp, debian linux +1 moreIncorrect persistent NameID generation in SimpleSAMLphp9.8 Critical
- simplesamlphp, debian linux +1 moreSimpleSAMLphp allows timing side-channel attacks5.9 Medium
- simplesamlphpSimpleSAMLphp Incorrect IV generation for encryption5.9 Medium
- netapp clustered data ontapNetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data...7.7 High
- netapp clustered data ontapNetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute...8.8 High
- netapp data ontapNetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to...6.5 Medium
- libzip, debian linux +1 moreThe _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which...6.5 Medium
- aerohive hivemanager classicHiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup...7.8 High
- fuji xerox co.,ltd. installer for contentsbridge utility for windows, fujixerox contentsbridge utility +1 moreUntrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and...7.8 High
- fujifilm apeosport-vi, docucentre-vi, fuji xerox co.,ltd. installer of art ex direct fax driver for apeosport-vi c7771/c6671/c5571/c4471/c3371/c2271 +9 more +11 moreUntrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671...7.8 High
- fuji xerox co.,ltd. self-extracting document generated by docuworks, fujixerox docuworks +1 moreUntrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and...7.8 High
- fujixerox docuworks, docuworks viewer light, fuji xerox co.,ltd. installer for docuworks +1 more +3 moreUntrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks...7.8 High
- nippon telegraph and telephone east corporation remote support tool (enkaku support tool), ntt enkaku support tool +1 moreUntrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions...7.8 High
- mcafee livesafe, live safe +1 moreA man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in...5.9 Medium
- mcafee live safe, security scan plus, livesafe +2 moreA Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee...9.8 Critical
- graphicsmagickThe ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not...8.8 High
- qemu, debian linux +1 moreUse-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator...7.5 High
- symantec proxyclientSymantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A...7.8 High
- simplesamlphpSimpleSAMLphp Unauthenticated encryption in CBC mode5.9 Medium
- simplesamlphp, debian linux +1 moreSimpleSAMLphp Authentication context bypass in the multiauth module7.5 High
- simplesamlphpSimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module9.8 Critical
- netapp data ontapNetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass...9.8 Critical
- mimedefangMIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account,...7.8 High
- libgd, canonical ubuntu linux, debian linux +1 more +3 moreDouble free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote...7.5 High
- linux kernelThe tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users...5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest...5.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreThe ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause...6.5 Medium