CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- mantisbtCAPTCHA bypass vulnerability in MantisBT before 1.2.19.7.5 High
- debian linux, linux kernel, nvidia jetson tk1 +7 more +9 moreThe native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6...8.0 High
- bluezAll versions of the SDP server in BlueZ 5.46 and earlier are vulnerable to an information...6.5 Medium
- hbgk 7204xr firmware, 7208xr firmware, 7216xr firmware +66 more +68 moreOn Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently...7.5 High
- gnu binutilsThe process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause...7.8 High
- imagemagickIn ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMPCImage in...6.5 Medium
- broadcom tcpreplaytcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a...7.8 High
- imagely nextgen galleryIn post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file...8.8 High
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.2.0 through 5.2.11 and 5.4.0...5.4 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 allows...5.4 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows...6.1 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows...6.1 Medium
- fortinet fortios, fortinet, inc. fortinet fortios +1 moreA Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0...5.4 Medium
- xenAn issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial...6.0 Medium
- gnu emacs, debian linux +1 moreGNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted ...8.8 High
- imagemagickIn ImageMagick 7.0.7-1 Q16, the PersistPixelCache function in magick/cache.c mishandles the pixel...6.5 Medium
- librawLibRaw before 0.18.4 has a heap-based Buffer Overflow in the processCanonCameraInfo function via...8.8 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.6-6 has a memory leak vulnerability in ReadXCFImage in coders/xcf.c via a crafted...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.6-6 has a memory exhaustion vulnerability in ReadWPGImage in coders/wpg.c via a...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function ReadMATImage in...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-1 Q16, a memory leak vulnerability was found in the function...6.5 Medium
- graphicsmagick, debian linux +1 moreOff-by-one error in the DrawImage function in magick/render.c in GraphicsMagick 1.3.26 allows...6.5 Medium
- shibboleth project shibbolethThe shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for...6.1 Medium
- nagios coreNagios Core through 4.3.4 initially executes /usr/sbin/nagios as root but supports configuration...7.8 High
- alegrocartPHP remote file inclusion vulnerability in the get_file function in upload/admin2/controller...7.2 High
- alegrocartMultiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute...7.2 High
- ultimatemember ultimate memberCross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29...6.1 Medium
- role scoper project scoperCross-site scripting (XSS) vulnerability in the Role Scoper plugin before 1.3.67 for WordPress...6.1 Medium
- gwolle guestbook project guestbookPHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress...9.0 Critical
- inboundnow call to actionMultiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1...6.1 Medium
- gameconnect sourcebansCross-site scripting (XSS) vulnerability in SourceBans before 2.0 pre-alpha allows remote...6.1 Medium
- ellucian banner studentOpen redirect vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7...6.1 Medium
- ellucian banner studentEllucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset...9.8 Critical
- ellucian banner studentEllucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allow remote attackers to...5.3 Medium
- ellucian banner studentCross-site scripting (XSS) vulnerability in Ellucian (formerly SunGard) Banner Student 8.5.1.2...6.1 Medium
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- Show moreLoading…