CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.8 High
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.8 High
- dlink dir-850l firmwarehtdocs/parentalcontrols/bind.php on D-Link DIR-850L REV. A (with firmware through...7.5 High
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.5 High
- dlink dir-850l firmwareD-Link DIR-850L REV. B (with firmware through FW208WWb02) devices have a hardcoded password of...9.8 Critical
- dlink dir-850l firmwareThe D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through...5.9 Medium
- dlink dir-850l firmwareThe D-Link NPAPI extension, as used on D-Link DIR-850L REV. A (with firmware through...5.9 Medium
- dlink dir-850l firmwareThe D-Link NPAPI extension, as used in conjunction with D-Link DIR-850L REV. B (with firmware...8.1 High
- dlink dir-850l firmwareregister_send.php on D-Link DIR-850L REV. B (with firmware through FW208WWb02) devices does not...9.8 Critical
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the...6.1 Medium
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the...6.1 Medium
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the...6.1 Medium
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) devices have XSS in the...6.1 Medium
- apache brooklynCross-site Scripting In Apache Brooklyn5.4 Medium
- unicon-software rpIn eLux RP 5.x before 5.5.1000 LTSR and 5.6.x before 5.6.2 CR when classic desktop mode is used,...6.3 Medium
- apache sparkApache Spark Deserialization of Untrusted Data vulnerability7.8 High
- mit kerberos 5, fedoraproject fedora +1 moreDouble free vulnerability in MIT Kerberos 5 (aka krb5) allows attackers to have unspecified...9.8 Critical
- apache brooklynDeserialization of Untrusted Data in Apache Brooklyn8.8 High
- apache brooklynApache Brooklyn is vulnerable to cross-site request forgery (CSRF)8.8 High
- drupalThe Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to...4.3 Medium
- apache traffic serverUnspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server before 5.3...9.8 Critical
- apache traffic serverUnspecified vulnerability in the HTTP/2 experimental feature in Apache Traffic Server 5.3.x...9.8 Critical
- symantec encryption desktopSymantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of...6.5 Medium
- sophos hitmanproIn Sophos SurfRight HitmanPro before 3.7.20 Build 286 (included in the HitmanPro.Alert solution...7.8 High
- sophos hitmanproA kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20...7.8 High
- sophos hitmanproA kernel pool overflow in the driver hitmanpro37.sys in Sophos SurfRight HitmanPro before 3.7.20...5.5 Medium
- razer synapserzpnk.sys in Razer Synapse 2.20.15.1104 allows local users to read and write to arbitrary memory...7.8 High
- axesstel mu553s firmwareOn the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the...5.4 Medium
- axesstel mu553s firmwareAxesstel MU553S MU55XS-V1.14 devices have a default password of admin for the admin account.9.8 Critical
- axesstel mu553s firmwareCross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S MU55XS-V1.14...8.8 High
- mp3gainAn invalid memory write was discovered in copy_mp in interface.c in mpglibDBL, as used in MP3Gain...7.8 High
- mp3gainA stack-based buffer overflow was discovered in copy_mp in interface.c in mpglibDBL, as used in...7.8 High
- mp3gainA buffer over-read was discovered in III_i_stereo in layer3.c in mpglibDBL, as used in MP3Gain...5.5 Medium
- mp3gainA buffer overflow was discovered in III_dequantize_sample in layer3.c in mpglibDBL, as used in...7.8 High
- mp3gainA stack-based buffer over-read was discovered in dct36 in layer3.c in mpglibDBL, as used in...5.5 Medium
- mp3gainA stack-based buffer over-read was discovered in filterYule in gain_analysis.c in MP3Gain version...5.5 Medium
- mp3gainA NULL pointer dereference was discovered in sync_buffer in interface.c in mpglibDBL, as used in...5.5 Medium
- eyesofnetworkThe EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote command execution via shell...7.2 High
- eyesofnetworkThe EyesOfNetwork web interface (aka eonweb) 5.1-0 allows local file inclusion via the tool_list...7.5 High
- eyesofnetworkThe EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the term parameter to...9.8 Critical
- eyesofnetworkThe EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter...9.8 Critical
- eyesofnetworkThe EyesOfNetwork web interface (aka eonweb) 5.1-0 has SQL injection via the user_name parameter...9.8 Critical
- microsoft .net frameworkMicrosoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to...7.8 High
- microsoft exchange server, exchange server 2016 +1 moreMicrosoft Exchange Server 2016 allows an elevation of privilege vulnerability when Microsoft...6.1 Medium
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an...7.5 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an...7.5 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an...7.5 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an...4.2 Medium
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an...7.5 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an...7.5 High
- Show moreLoading…