CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- openstack instack-undercloudinstack-undercloud vulnerable to symlink attack on tmp files6.4 Medium
- libexif project libexiflibexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in...9.1 Critical
- fedoraproject fedora, pureftpd pure-ftpd +1 moreDownstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error...9.8 Critical
- tapatalkSQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8...9.8 Critical
- wso2 data analytics server, api manager, app manager +14 more +16 moreWSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via...4.8 Medium
- horde image apiA Remote Code Execution vulnerability has been found in the Horde_Image library when using the ...8.1 High
- graphicsmagickReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG...5.5 Medium
- bladeencA global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc...9.8 Critical
- bento4A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core...8.8 High
- axiosys bento4The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate...7.5 High
- bento4A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream...6.5 Medium
- bento4A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617. The...8.8 High
- bento4The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect...6.5 Medium
- bento4A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617....6.5 Medium
- bento4A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp...6.5 Medium
- bento4A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core...6.5 Medium
- bento4AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect...8.8 High
- bento4AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has...6.5 Medium
- mirasvit helpdesk mxMultiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit...5.4 Medium
- mirasvit helpdesk mxMirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by...8.0 High
- tecnovision dlx spot player4SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows...9.8 Critical
- tecnovision dlx spot player4Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows...8.8 High
- tecnovision dlx spot player4A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all...9.8 Critical
- proxychains-ng project proxychains-ngUntrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain...7.8 High
- d-link and trendnet multiple devices, dlink dir-626l firmware, dir-636l firmware +13 more +15 moreThe ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary...9.8 Critical
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, user-level...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, in function...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, potential use...4.7 Medium
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition...4.7 Medium
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan...7.0 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, while reading...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, in the function...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, in functions...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from...5.5 Medium
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, while processing...5.5 Medium
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the...5.5 Medium
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, in...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs...7.8 High
- google androidIn all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds...5.5 Medium
- xiph.org libvorbis, debian linux +1 moreThe bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to...8.8 High
- chefThe knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem...7.5 High
- freeipaipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc...9.8 Critical
- ipythonImproper Neutralization of Input During Web Page Generation in IPython6.1 Medium
- Show moreLoading…