CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- google androidA elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android....7.8 High
- google androidA remote code execution vulnerability in the Android libraries (libgdx). Product: Android....7.8 High
- google androidA elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android...7.8 High
- yast yast2The YaST2 network created files with world readable permissions which could have allowed local...7.8 High
- kubik-rubik easy joomla backupVulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web...7.5 High
- synology photo stationServer-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station...6.5 Medium
- synology photo stationDirectory traversal vulnerability in synphotoio in Synology Photo Station before 6.7.4-3433 and 6...6.5 Medium
- synology photo stationMultiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968...9.8 Critical
- divinglog diving logXXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml...5.5 Medium
- wolfcms wolf cmsWolf CMS 0.8.3.1 allows Cross-Site Scripting (XSS) attacks. The vulnerability exists due to...5.4 Medium
- imagemagickA heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows...8.8 High
- qemu, debian linux +1 moreInteger overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick...8.8 High
- linux kernelThe driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1...7.0 High
- google androidA elevation of privilege vulnerability in the Upstream kernel scsi driver. Product: Android....7.8 High
- intelbras wrn 240 firmwareXSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows...6.1 Medium
- cisco ios xeA vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series...6.7 Medium
- cisco ios xeA vulnerability in the USB-modem code of Cisco IOS XE Software running on Cisco ASR 920 Series...4.4 Medium
- cisco meeting serverA vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an...6.7 Medium
- cisco prime collaboration provisioningA vulnerability in the Inventory Management feature of Cisco Prime Collaboration Provisioning...6.5 Medium
- cisco prime collaboration provisioningA vulnerability in the batch provisioning feature in Cisco Prime Collaboration Provisioning Tool...6.5 Medium
- cisco unified communications managerA vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager...7.5 High
- cisco unified intelligence centerA vulnerability in the Cisco Unified Intelligence Center web interface could allow an...6.1 Medium
- cisco connected grid network management system, iot field network director +1 moreA vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND)...7.5 High
- cisco yesmax hd firmware, yesmaxtotal firmware, yesquattro firmware +2 moreA vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers...7.5 High
- cisco ios, ios xe, ios and ios xe software +2 moreA vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14...7.5 High
- cisco emergency responderA vulnerability in the SQL database interface for Cisco Emergency Responder could allow an...5.4 Medium
- cisco prime lan management solutionA vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow...6.5 Medium
- cisco meeting serverA vulnerability in the ability for guest users to join meetings via a hyperlink with Cisco...6.5 Medium
- cisco ir800 integrated services router firmwareA vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router...6.4 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web framework of Cisco Firepower Management Center could allow an...5.4 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web-based management interface of Cisco Firepower Management Center could...6.1 Medium
- cisco asyncos, email security appliance +1 moreA vulnerability in the malware detection functionality within Advanced Malware Protection (AMP)...5.8 Medium
- cisco asr 5500 firmwareA vulnerability in the General Packet Radio Service (GPRS) Tunneling Protocol ingress packet...5.3 Medium
- cisco socialminerA vulnerability in the web-based user interface of Cisco SocialMiner could allow an...8.8 High
- cisco ios xeA vulnerability in the dynamic access control list (ACL) feature of Cisco IOS XE Software running...4.3 Medium
- cisco unity connectionA vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated,...6.1 Medium
- cisco ios, ios xe +1 moreA vulnerability in the IPv6 Simple Network Management Protocol (SNMP) code of Cisco IOS and Cisco...5.3 Medium
- centreonCentreon Cross-site Scripting Vulnerability5.4 Medium
- anchorcms anchor cmsCross-site scripting (XSS) vulnerability in anchor-cms before 0.9-dev.6.1 Medium
- sefrengoSQL injection vulnerability in Sefrengo before 1.6.5 beta2.9.8 Critical
- concretecms concrete cmsSQL injection vulnerability in Concrete5 5.7.3.1.8.8 High
- concretecms concrete cmsMultiple cross-site scripting (XSS) vulnerabilities in Concrete5 5.7.3.1.6.1 Medium
- sumo google analyticatorCross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6...8.8 High
- huawei e5756s firmwareHuawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration...9.8 Critical
- pragyan cms project cmsSQL injection vulnerability in Pragyan CMS 3.0.9.8 Critical
- denkgroot spinaSpina gem vulnerable to Cross-site request forgery (CSRF) vulnerability8.8 High
- etherpadDirectory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests...7.5 High
- strongswanstrongSwan 5.2.2 and 5.3.0 allows remote attackers to cause a denial of service (daemon crash) or...9.8 Critical
- tune library project librarySQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.8.1 High
- community events project eventsSQL injection vulnerability in WordPress Community Events plugin before 1.4.9.8 Critical
- Show moreLoading…