CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- ibm security siteprotector systemIBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges.7.0 High
- magentoCross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1.6.1 Medium
- apache strutsApache Struts allows entering a custom URL in a form field if built-in URLValidator is used7.5 High
- apache strutsThe REST Plugin in Apache Struts is using an outdated XStream library7.5 High
- apache strutsApache Struts 2.0.1 uses an unintentional expression in a Freemarker tag instead of string literal9.8 Critical
- apache strutsApache Struts vulnerable to possible DoS attack when using URLValidator5.9 Medium
- apache strutsPath Traversal in Apache Struts9.8 Critical
- mirion technologies dmc 3000 firmware, drm-1\/2 firmware, ipam transmitter f\/dmc 2000 firmware +4 more +6 moreA Use of Hard-Coded Cryptographic Key issue was discovered in Mirion Technologies DMC 3000...5.0 Medium
- mirion dmc 3000 transmitter firmware, drm-1\/2 firmware, drm-2 firmware +5 more +7 moreAn Inadequate Encryption Strength issue was discovered in Mirion Technologies DMC 3000...6.5 Medium
- trustedfirmware trusted firmware-aThe BL1 FWU SMC handling code in ARM Trusted Firmware before 1.4 might allow attackers to write...7.0 High
- rockwellautomation 1763-l16awa firmware, 1763-l16bbb firmware, 1763-l16bwa firmware +1 more +3 moreAn Improper Input Validation issue was discovered in Rockwell Automation MicroLogix 1100...7.5 High
- yadifaThe DNS packet parser in YADIFA before 2.2.6 does not check for the presence of infinite pointer...7.5 High
- huawei p8 firmwareHuawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA...3.7 Low
- redhat feedhenry enterprise mobile application platformReflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform.6.5 Medium
- freeipaFreeIPA might display user data improperly via vectors involving non-printable characters.7.5 High
- helpdeskpro helpdesk proThe Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary ...8.1 High
- helpdesk pro project proDirectory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows...7.5 High
- helpdesk pro project proMultiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow...9.8 Critical
- helpdesk pro project proMultiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for...5.4 Medium
- twsz wifi repeater firmwareOn BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default)...9.8 Critical
- twsz wifi repeater firmwareOn BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default)...9.8 Critical
- twsz wifi repeater firmwareThere is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to...7.5 High
- gnome nautilus, debian linux +1 moreGNOME Nautilus before 3.23.90 allows attackers to spoof a file type by using the .desktop file...6.5 Medium
- linux kernelThe access_pmu_evcntr function in arch/arm64/kvm/sys_regs.c in the Linux kernel before 4.8.11...6.0 Medium
- freedesktop popplerIn Poppler 0.59.0, a floating point exception occurs in the ImageStream class in Stream.cc, which...7.8 High
- librawIn LibRaw through 0.18.4, an out of bounds read flaw related to kodak_65000_load_raw has been...9.1 Critical
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-4 Q16, an out of bounds read flaw related to ReadTIFFImage has been reported...8.1 High
- samba, debian linux, redhat enterprise linux desktop +3 more +5 moreAn information leak flaw was found in the way SMB1 protocol was implemented by Samba before 4.4...4.1 Medium
- samba, debian linux, hp cifs server +5 more +7 moreA flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used...7.4 High
- samba, debian linux, redhat enterprise linux desktop +3 more +5 moreIt was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not...7.4 High
- polycom realpresence resource managerPolycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users with access to the...7.0 High
- polycom realpresence resource managerMultiple directory traversal vulnerabilities in Polycom RealPresence Resource Manager (aka RPRM)...6.5 Medium
- polycom realpresence resource managerPolycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive...9.8 Critical
- polycom realpresence resource managerPolycom RealPresence Resource Manager (aka RPRM) before 8.4 allows remote authenticated users to...6.5 Medium
- polycom realpresence resource managerPolycom RealPresence Resource Manager (aka RPRM) before 8.4 allows local users to have...7.8 High
- codeigniterCodeIgniter before 2.2.0 makes it easier for attackers to decode session cookies by leveraging...9.8 Critical
- codeigniter, kohanaframework kohana +1 moreCodeIgniter and Kohana vulnerable to PHP Object Injection9.8 Critical
- sophos astaro security gateway firmwareAstaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a...9.8 Critical
- redhat jboss enterprise application platformAdvancedLdapLodinMogule in Red Hat JBoss Enterprise Application Platform (EAP) before 6.4.1...5.9 Medium
- sap netweaver application server javaThe Host Control web service in SAP NetWeaver AS JAVA 7.0 through 7.5 allows remote attackers to...7.5 High
- netmechanica netdecisionThe Winring0x32.sys driver in NetMechanica NetDecision 5.8.2 allows local users to gain...7.8 High
- kaltura serverThe getUserzoneCookie function in Kaltura before 13.2.0 uses a hardcoded cookie secret to...9.8 Critical
- kaltura serverMultiple cross-site scripting (XSS) vulnerabilities in Kaltura before 13.2.0 allow remote...6.1 Medium
- kaltura serverThe wiki_decode Developer System Helper function in the admin panel in Kaltura before 13.2.0...7.2 High
- qnap qtsIn the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can...9.8 Critical
- wpfastestcache wp fastest cacheMultiple cross-site request forgery (CSRF) vulnerabilities in the optionsPageRequest function in...8.8 High
- phpbbphpBB Open Redirect6.1 Medium
- pydioMultiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly AjaXplorer) before 6.0.7...6.1 Medium
- pydioPydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands...9.8 Critical
- dovecot, fedoraproject fedora +1 moreThe ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote...5.9 Medium
- Show moreLoading…