CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- fastlyFastly Magento2 sensitive information disclosure6.5 Medium
- redhat enterprise linux, enterprise mrg, kernel-rt +2 moreRace condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG...4.7 Medium
- mapsplugin googlemapsThe Googlemaps plugin before 3.1 for Joomla! allows remote attackers to conduct XML injection...9.8 Critical
- qnap qts, qts media libary product +1 moreQNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all...9.8 Critical
- ibm jazz reporting serviceAn unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through...5.3 Medium
- pagure project pagurePagure 3.3.0 and earlier is vulnerable to loss of confidentially due to improper authorization7.5 High
- fedora project infrastructure python-fedorapython-fedora vulnerable to an open redirect resulting in loss of CSRF protection6.1 Medium
- kubernetesDefault access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud...6.5 Medium
- angry byte wordpress-gallery-transformation, angrybyte gallery-transformation +1 moreVulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ....9.8 Critical
- rayanehdownload rk-responsive-contact-formVulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't...9.8 Critical
- event espresso expresso free, eventespresso event espresso +1 moreVulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function...8.8 High
- add-edit-delete-listing-for-member-module project add-edit-delete-listing-for-member-moduleVulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin...7.2 High
- kind editor inc. editor, kindsoft kind editor, kindeditor +2 moreVulnerability in web application Kind Editor v4.1.12, kindeditor/php/upload_json.php does not...4.3 Medium
- daisy themes easy team managerVulnerability in wordpress plugin Easy Team Manager v1.3.2, The code does not sanitize id before...9.8 Critical
- binny v a surveysVulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize...9.8 Critical
- binny v a surveysVulnerability in wordpress plugin surveys v1.01.8, The code in individual_responses.php does not...9.8 Critical
- binny v a surveysVulnerability in wordpress plugin surveys v1.01.8, The code in survey_form.php does not sanitize...9.8 Critical
- binny v a eventrVulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do...9.8 Critical
- binny v a eventrVulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not...9.8 Critical
- bob cares gift-certificate-creatorVulnerability in wordpress plugin gift-certificate-creator v1.0, The code in gc-list.php doesn't...6.1 Medium
- daozhao flickr-picture-backup, flickr picture backup project picture backup +1 moreVulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download...9.8 Critical
- anblik image-gallery-with-slideshowVulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in...9.8 Critical
- anblik image-gallery-with-slideshowVulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in...9.8 Critical
- anblik image-gallery-with-slideshowVulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via...9.8 Critical
- anblik image-gallery-with-slideshowVulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with...9.8 Critical
- anblik image-gallery-with-slideshowVulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS...5.4 Medium
- ontraport membership simplifiedVulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified...9.8 Critical
- ontraport membership simplifiedVulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified...9.8 Critical
- membership simplified project simplified, william deangelis membership-simplified-for-oap-members-only +1 moreVulnerability in wordpress plugin membership-simplified-for-oap-members-only v1.58, The file...9.8 Critical
- dtracker project dtrackerVulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_mail.php doesn't check...7.5 High
- dtracker project dtrackerVulnerability in wordpress plugin DTracker v1.5, The code dtracker/save_contact.php doesn't check...7.5 High
- dtracker project dtrackerVulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/delete.php user input isn't...7.5 High
- dtracker project dtrackerVulnerability in wordpress plugin DTracker v1.5, In file ./dtracker/download.php user input isn't...7.5 High
- invedion wp2android-turn-wp-site-into-android-appVulnerability in wordpress plugin wp2android-turn-wp-site-into-android-app v1.1.4, The plugin...9.8 Critical
- invedion webapp-builderVulnerability in wordpress plugin webapp-builder v2.0, The plugin includes unlicensed vulnerable...9.8 Critical
- invedion mobile-app-builder-by-wappressVulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes...9.8 Critical
- jenova12345 mobile-friendly-app-builder-by-easytouchVulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file...9.8 Critical
- gstn india goods and services tax network offline utility toolGSTN_offline_tool in India Goods and Services Tax Network (GSTN) Offline Utility tool before 1.2...7.8 High
- xenMemory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or...5.5 Medium
- cisco meeting serverA vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server...9.1 Critical
- libofx, debian linux +1 moreAn exploitable buffer overflow vulnerability exists in the tag parsing functionality of LibOFX 0...8.8 High
- ibm api connectIBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could...6.5 Medium
- ibm informix dynamic server, informix servers +1 moreIBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator...6.7 Medium
- red hat resteasy, redhat jboss enterprise application platform +1 moreInconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP7.5 High
- red hat, inc. rhnsdIt was found that rhnsd PID files are created as world-writable that allows local attackers to...5.5 Medium
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.5 High
- dlink dir-850l firmwareThe DHCP client on D-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV....9.8 Critical
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.8 High
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.8 High
- dlink dir-850l firmwareD-Link DIR-850L REV. A (with firmware through FW114WWb07_h2ab_beta1) and REV. B (with firmware...7.8 High
- Show moreLoading…