CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- redhat beakerThe admin pages for power types and key types in Beaker before 20.1 do not have any access...4.3 Medium
- beaker-project beakerCross-site scripting (XSS) vulnerability in the edit comment dialog in bkr/server/widgets.py in...5.4 Medium
- beaker-project beakerThe search bar code in bkr/server/widgets.py in Beaker before 20.1 does not escape </script> tags...4.8 Medium
- beaker-project beakerXML external entity (XXE) vulnerability in bkr/server/jobs.py in Beaker before 20.1 allows remote...4.3 Medium
- honda moto lincHonda Moto LINC 1.6.1 does not verify SSL certificates.5.9 Medium
- epicor crs retail storeThe help window in Epicor CRS Retail Store before 3.2.03.01.008 allows local users to execute...7.8 High
- pysvn project svn-workbenchsvn-workbench 1.6.2 and earlier on a system with xeyes installed allows local users to execute...8.8 High
- graphicsmagickThe ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has an issue where memory...6.5 Medium
- uclouvain openjpegA size-validation issue was discovered in opj_j2k_write_sot in lib/openjp2/j2k.c in OpenJPEG 2.2...8.8 High
- bento4The AP4_AvccAtom::InspectFields function in Core/Ap4AvccAtom.cpp in Bento4 mp4dump before 1.5.0...5.5 Medium
- axiosys bento4The AP4_Processor::Process function in Core/Ap4Processor.cpp in Bento4 mp4encrypt before 1.5.0...5.5 Medium
- bento4The AP4_AtomSampleTable::GetSample function in Core/Ap4AtomSampleTable.cpp in Bento4 mp42ts...5.5 Medium
bzrUbuntubzr vulnerabilityNo score- libarchive, canonical ubuntu linux, debian linux +2 morelibarchive 3.3.2 allows remote attackers to cause a denial of service (xml_data heap-based buffer...6.5 Medium
- ibm qradar network securityIBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those...7.5 High
- ibm qradar network securityIBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack...8.1 High
- ibm qradar network securityIBM QRadar Network Security 5.4 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- hcl software notes, ibm inotes +1 moreIBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a...6.5 Medium
- hcl software notes, ibm expeditor, inotes +1 more +3 moreIBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a...6.5 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to...8.8 High
- intel small business technology firmware, intel corporation active management technology, intel standard manageability, and intel small business technology, intel active management technology firmware +1 more +3 moreIntel Active Management Technology, Intel Standard Manageability, and Intel Small Business...4.4 Medium
- hyland software, inc. perceptive document filtersAn exploitable code execution vulnerability exists in the image rendering functionality of...7.5 High
- hyland software, inc. perceptive document filtersAn exploitable use-after-free exists in the PDF parsing functionality of Lexmark Perspective...8.8 High
- ledger cli, ledger-cli ledger +1 moreAn exploitable use-after-free vulnerability exists in the account parsing component of the Ledger...7.5 High
- ledger cli, ledger-cli ledger +1 moreAn exploitable buffer overflow vulnerability exists in the tag parsing functionality of Ledger...7.5 High
- national instruments labview 2016, ni labview +1 moreAn exploitable memory corruption vulnerability exists in the RSRC segment parsing functionality...7.5 High
- openldap, oracle blockchain platform +1 moreslapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root...4.7 Medium
- scrapyScrapy denial of service vulnerability7.5 High
- uclouvain openjpeg, debian linux +1 moreA mishandled zero case was discovered in opj_j2k_set_cinema_parameters in lib/openjp2/j2k.c in...8.8 High
- uclouvain openjpeg, debian linux +1 moreAn off-by-one error was discovered in opj_tcd_code_block_enc_allocate_data in lib/openjp2/tcd.c...8.8 High
- apache hadoopExposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop9.8 Critical
- embedthis goaheadGoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference in the websDecodeUrl function in http...7.5 High
- helpdezkHelpDEZk 1.1.1 allows remote authenticated users to execute arbitrary PHP code by uploading a ...8.8 High
- helpdezkHelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the...9.8 Critical
- gnome geditlibgedit.a in GNOME gedit through 3.22.1 allows remote attackers to cause a denial of service ...5.5 Medium
- gnome gdk-pixbuf, debian linux +1 moreAn exploitable integer overflow vulnerability exists in the tiff_image_parse functionality of Gdk...8.8 High
- gnome gdk-pixbuf, debian linux +1 moreAn exploitable heap overflow vulnerability exists in the gdk_pixbuf__jpeg_image_load_increment...8.8 High
- canonical bazaar, ubuntu linux, debian linux +2 moreBazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostname8.8 High
- linux kernelThe atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12...5.5 Medium
- linux kernelThe move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the...5.5 Medium
- file project fileAn issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016)...5.5 Medium
- imagemagickImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.6.5 Medium
- imagemagickImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because...9.8 Critical
- imagemagickReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is...7.5 High
- opencv, debian linux +1 moreOut-of-bounds Write in OpenCV6.5 Medium
- dreambox opendreamboxenigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for...9.8 Critical
- jasper project jasper, debian linux +1 moreJasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1...6.5 Medium
- gnu binutilsThe _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library...5.5 Medium
- gnu binutilsThe read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd),...5.5 Medium
- gnu binutilsThe decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd...5.5 Medium
- Show moreLoading…