CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- vbulletinvBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization checks and...6.5 Medium
- floating social bar project social barCross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for...6.1 Medium
- kallithea-scm kallitheaKallithea cross-site scripting (XSS) vulnerability5.4 Medium
- cisco cloud web securityCisco Cloud Web Security before 3.0.1.7 allows remote attackers to bypass intended filtering...7.5 High
- netsweeperUnrestricted file upload vulnerability in webadmin/ajaxfilemanager/ajaxfilemanager.php in...7.2 High
- netsweeperThe Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before...9.8 Critical
- netsweeperNetsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to...7.5 High
- netsweeperNetsweeper before 4.0.5 allows remote attackers to bypass authentication and create arbitrary...9.8 Critical
- netsweeperNetsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to...5.3 Medium
- redhat edeployeDeploy makes it easier for remote attackers to execute arbitrary code by leveraging use of HTTP...9.8 Critical
- ibm curam social program managementCross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4,...5.4 Medium
- landesk management suiteThe admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to...7.2 High
- zte zx10 1800-2s, zxr10 160 firmware, zxr10 1800-2s firmware +2 more +4 moreThe ZXR10 1800-2S before v3.00.40 incorrectly restricts the download of the file directory range...7.5 High
- zte zx10 1800-2s, zxr10 160 firmware, zxr10 1800-2s firmware +2 more +4 moreThe ZXR10 1800-2S before v3.00.40 incorrectly restricts access to a resource from an unauthorized...9.8 Critical
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 moreWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server8.1 High
- pragyan cms project cmsPragyan CMS v3.0 is vulnerable to a Boolean-based SQL injection in cms/admin.lib.php via $_GET[...4.9 Medium
- pragyan cms project cmsPragyan CMS v3.0 is vulnerable to an Error-Based SQL injection in cms/admin.lib.php via $_GET[...4.9 Medium
- afterlogic aurora, webmail +1 moreAdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to...4.8 Medium
- ruby-lang rubyRuby OpenSSL DoS Vulnerability7.5 High
- perlBuffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26...9.1 Critical
- perlHeap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and...7.5 High
- apache tomcatExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat7.5 High
- linux kernelThe prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not...7.1 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c...4.4 Medium
- ruby-lang rubyWEBrick RCE Vulnerability8.8 High
- apache solrApache Solr Kerberos delegation token functionality flaws7.5 High
- twitterThe Twitter iOS client versions 6.62 and 6.62.1 fail to validate Twitter's server certificates...5.9 Medium
bind9Ubuntubind9 regressionNo score- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.1.2...5.9 Medium
- xnviewXnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- irfanviewIrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- Show moreLoading…