CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- freedesktop popplerIn Poppler 0.59.0, a floating point exception occurs in Splash::scaleImageYuXd() in Splash.cc,...7.8 High
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::streamGetChar in Object.h after...7.5 High
- freedesktop popplerIn Poppler 0.59.0, a floating point exception exists in the isImageInterpolationRequired()...7.8 High
- imagemagickDrawGetStrokeDashArray in wand/drawing-wand.c in ImageMagick 7.0.7-1 mishandles certain NULL...6.5 Medium
- libarchivelibarchive 3.3.2 suffers from an out-of-bounds read within lha_read_data_none() in...6.5 Medium
- libarchiveread_header in archive_read_support_format_rar.c in libarchive 3.3.2 suffers from an off-by-one...7.5 High
- libarchiveAn out-of-bounds read flaw exists in parse_file_info in archive_read_support_format_iso9660.c in...6.5 Medium
- terra-master terramaster operating systemShell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster...9.8 Critical
- google androidInteger overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via...7.8 High
- ibm business process manager, websphere application server +1 moreIBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition ...6.5 Medium
- vbseofunctions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to...8.8 High
- apache wicketApache Wicket insecure defaults7.5 High
- apache struts, cisco digital media manager, hosted collaboration solution +4 more +6 moreREST Plugin in Apache Struts uses an XStreamHandler with an instance of XStream for deserialization without any type filtering8.1 High
- puppet puppetlabs-apacheVersions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to...7.5 High
- silverstripeSilverstripe CMS XSS Vulnerability6.1 Medium
- debian linux, linux kernel +1 moreThe tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles...7.8 High
- digital arts inc. "i-filter 6.0 installer", daj i-filter installer +1 moreUntrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is...7.8 High
- digital arts inc. "i-filter 6.0 installer", daj i-filter installer +1 moreUntrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is...7.8 High
- digital arts inc. "i-filter 6.0 install program", daj i-filter installer +1 moreUntrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and...7.8 High
- internet initiative japan inc. seil/b1, seil/bpv4, seil/x +6 more +8 moreSEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows...3.7 Low
- fujitsu fence-explorer, fujitsu limited fence-explorer for windows +1 moreUntrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an...7.8 High
- ntt docomo, inc. wi-fi station l-02f, nttdocomo wi-fi station l-02f firmware +1 moreWi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access...7.5 High
- ntt docomo, inc. wi-fi station l-02f, nttdocomo wi-fi station l-02f firmware +1 moreWi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the...9.8 Critical
- corega inc. cg-wlr300nm, corega wlr 300 nm firmware +1 moreBuffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute...6.8 Medium
- corega wlr 300 nm firmwareCG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands...6.8 Medium
- vmware vcenter serverVMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored...5.4 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG,...5.5 Medium
- vmware esxi, fusion, workstation +1 more +3 moreVMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and...8.8 High
- gentoo sci-mathematics-gimpsThe Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search...7.3 High
- gentoo dev-python-flowerflower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID...5.5 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0...6.5 Medium
- debian linux, google chrome +1 moreUse of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows,...4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreBlink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for...4.3 Medium
- debian linux, google chrome +1 moreUse of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and...6.5 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreType confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0...8.8 High
- google chromeType confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker...8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux,...8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreMath overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61...8.8 High
- google chromeHeap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote...8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreA use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac...8.8 High
- linux kernelThe iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13...5.5 Medium
- linux kernelThe XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not...5.5 Medium
- hackerone rubyRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...9.1 Critical
- ansible-vault project ansible-vaultCode injection in ansible7.5 High
- google androidA information disclosure vulnerability in the Android system (bluetooth). Product: Android....6.5 Medium
- google androidA information disclosure vulnerability in the Android system (bluetooth). Product: Android....6.5 Medium
- google androidA remote code execution vulnerability in the Android system (bluetooth). Product: Android....8.8 High
- google androidA remote code execution vulnerability in the Android system (bluetooth). Product: Android....8.8 High
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser....9.8 Critical
- adobe flash player, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreAdobe Flash Player has an exploitable memory corruption vulnerability in the text handling...9.8 Critical
- Show moreLoading…