CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- nodebbNodeBB Cross-site Scripting Vulnerability in Markdown Processing6.1 Medium
- kallithea-scm kallitheaKallithea cross-site request forgery (CSRF) vulnerability8.8 High
ffmpegMageiaUpdated ffmpeg packages fix security vulnerabilityNo score- otrsIn Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0...8.8 High
- sam2p project sam2pIn sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading...9.8 Critical
- sam2p project sam2pIn sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp...9.8 Critical
- sam2p project sam2pIn sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error,...7.5 High
- sam2p project sam2pIn sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file...9.8 Critical
- cisco esw2-350g-52 firmware, esw2-350g-52dc firmware, esw2-550x-48 firmware +82 more +84 moreA vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches...6.5 Medium
- cisco unified computing systemA vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local...6.7 Medium
- cisco unified intelligence centerA vulnerability in the web interface of Cisco Unified Intelligence Center could allow an...6.1 Medium
- cisco unified intelligence centerA vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote...8.8 High
- cisco findit network discovery utilityA vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local...7.8 High
- cisco wide area application servicesA vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could...5.3 Medium
- cisco unified intelligence centerA vulnerability in the web framework code of Cisco Unified Intelligence Center Software could...6.1 Medium
- cisco spa 301 firmware, spa 303 firmware, spa 500ds firmware +8 more +10 moreA vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and...7.5 High
- cisco asyncos, email security appliance +1 moreA vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco...7.1 High
- cisco unified customer voice portalA vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP)...8.8 High
- imagemagickIn ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage...6.5 Medium
- imagemagickGetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial...8.8 High
- libsndfile project libsndfile, debian linux +1 moreIn libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c...6.5 Medium
- xiph.org libvorbis, canonical ubuntu linux, debian linux +2 moreIn Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function...6.5 Medium
- xiph.org libvorbis, canonical ubuntu linux, debian linux +2 moreXiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the...9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode...9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function...9.8 Critical
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function...9.8 Critical
- libsndfile project libsndfile, debian linux +1 moreAn out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a...8.1 High
- libsndfile project libsndfile, debian linux +1 moreAn out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a...8.1 High
- go-ldap project ldapAccess Restriction Bypass in go-ldap8.1 High
- suse portusPortus 2.2.0 has XSS via the Team field, related to typeahead.5.4 Medium
- good for enterpriseThe Good for Enterprise application 3.0.0.415 for Android does not use signature protection for...5.3 Medium
- phpmyfaqCross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to...6.1 Medium
- phpmyfaqCross-site scripting (XSS) vulnerability in inc/PMF/Faq.php in phpMyFAQ through 2.9.8 allows...4.8 Medium
- watchguard firewareAn FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made...7.5 High
- watchguard firewareAn FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt...6.1 Medium
- iterm2iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A...7.5 High
qemuUbuntuqemu regressionNo score- bareosbareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary proc…7.8 High
- kannelThe server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a...7.8 High
- joomla joomla\!In Joomla! before 3.8.0, inadequate escaping in the LDAP authentication plugin can result in a...9.8 Critical
- joomla joomla\!In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro...3.7 Low
- zcms project zcmsCross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1.4.8 Medium
- libpgfUse-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32.9.8 Critical
- joomla joomla\!Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1.6.1 Medium
- alinto sogo, debian linux +1 moreCross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0.8.8 High
- litespeedtech openlitespeedUse-after-free vulnerability in Open Litespeed before 1.3.10.7.5 High
- debian linux, nodejs node.js, uronode uro node +2 morenode 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service ...6.5 Medium
- simple ads manager project ads managerWordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive...5.3 Medium
- emberjs ember.jsember-source vulnerable to Cross-site Scripting6.1 Medium
- gnu coreutilsfts.c in coreutils 8.4 allows local users to delete arbitrary files.4.7 Medium
- Show moreLoading…