CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...5.5 Medium
- microsoft windows 7, windows 8.1, windows rt 8.1 +3 more +5 moreThe Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Windows GDI+ component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...5.5 Medium
- microsoft live meeting, lync, office +12 more +14 moreThe Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1;...3.3 Low
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1,...7.0 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an...8.8 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to...7.5 High
- microsoft edge, windows 10 +1 moreMicrosoft Edge in Microsoft Windows Version 1703 allows an attacker to obtain information to...4.3 Medium
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an...4.3 Medium
- microsoft excel, excel for mac, office +2 more +4 moreA remote code execution vulnerability exists in Microsoft Excel 2010 Service Pack 2, Microsoft...7.8 High
- microsoft excel, excel viewer, excel web app +4 more +6 moreA remote code execution vulnerability exists in Excel Services, Microsoft Excel 2007 Service Pack...7.8 High
- microsoft officeMicrosoft Office 2016 allows a remote code execution vulnerability when it fails to properly...7.8 High
- microsoft sharepoint serverMicrosoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability...5.4 Medium
- microsoft windows 10, windows 7, windows 8.1 +3 more +5 moreMicrosoft Bluetooth Driver in Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1...6.8 Medium
- microsoft edge, windows 10 +1 moreMicrosoft Edge in Microsoft Windows 10 Version 1703 allows an attacker to obtain information to...4.3 Medium
- microsoft excel for mac, office +1 moreA remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to...7.8 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an...7.5 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to...7.5 High
- microsoft exchange serverMicrosoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization...5.3 Medium
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7...8.1 High
- ait-pro bulletproof securityIn the admin/db-backup-security/db-backup-security.php page in the BulletProof Security plugin...4.8 Medium
- imagely nextgen galleryIn the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for...4.8 Medium
- ibm db2, db2 for linux, unix and windows, db2 connect +2 moreIBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the...3.7 Low
- ibm db2, db2 connect, db2 for linux, unix and windows +2 moreIBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause...5.9 Medium
- ibm db2, db2 for linux, unix and windows, db2 connect +2 moreIBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could...7.8 High
- ibm db2, db2 for linux, unix and windows, db2 connect +2 moreIBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could...7.8 High
- blackcat-cms blackcat cmsIn BlackCat CMS 1.2.2, unrestricted file upload is possible in backend\media\ajax_rename.php via...8.8 High
- anydeskAnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.9.8 Critical
- osticketIn osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square...9.8 Critical
- ibm db2, db2 for linux, unix and windows, db2 connect +2 moreIBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could...6.7 Medium
- ibm db2, db2 for linux, unix and windows, db2 connect +2 moreIBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could...6.7 Medium
- ibm db2, db2 for linux, unix and windows, db2 connect +2 moreIBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual...4.7 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into...5.5 Medium
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can...7.5 High
- emc appsyncEMC AppSync (all versions prior to 3.5) contains a SQL injection vulnerability that could...9.8 Critical
- nexusphp project nexusphpNexusPHP 1.5.beta5.20120707 has XSS in the returnto parameter to fun.php in a delete action.6.1 Medium
- blackwave dive assistantXXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows...5.5 Medium
- blog project blogupload.php in tianchoy/blog through 2017-09-12 allows unrestricted file upload and PHP code...9.8 Critical
- blog project blogSQL Injection exists in tianchoy/blog through 2017-09-12 via the id parameter to view.php.9.8 Critical
- jungo windriverThis vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and...7.8 High
- misp-project mispWhen MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in...8.1 High
- xenA grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant...8.8 High
- xenAn issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles...6.5 Medium
- xenA domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4...5.6 Medium
- xenA parameter verification issue was discovered in Xen through 4.9.x. The function ...8.8 High
- apple iphone osIn Apple iOS 7 through 9, due to a BlueBorne flaw in the implementation of LEAP (Low Energy Audio...7.5 High
- jenkinsJenkins HttpOnly flag not Set for session cookies5.3 Medium
- jenkinsJenkins secure flag not set on session cookies5.3 Medium
- Show moreLoading…